Study. uk . com
  1. Home
  2. All questions
  3. Question 735

CISM study material · question 735 of 1000

The Community Profile asks that incident decision-making be informed by more than cybersecurity risk. Which two other risk types does it name? Choose two.

  1. Reputational and artificial intelligence risk
  2. Foreign exchange exposure risk and short-term liquidity risk
  3. Privacy and safety risk
  4. Credit risk and market pricing risk
Show the answer

Answer: C. Privacy and safety risk
A. Reputational and artificial intelligence risk

SP 800-61r3 recommends having processes so incident-related decision-making is informed by other types of risk the organisation faces — privacy, operational, safety, reputational and AI — and not by cybersecurity risk in isolation.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 2 GV.RM-03.R1

Challenge yourself on this topic → Study as cards