1. Home
2. All questions
3. Question 87

CISM study material · question 87 of 1000

A risk assessment of partners considers only competitors and known adversaries as sources of concern. Which category does SP 800-39 warn is being missed?

• Security governance
• Risk management

1. A partner that has never suffered a breach, whose clean record removes the need to assess it before information is shared
2. A partner that is neither competing nor hostile but may be the path through which such an entity attacks
3. A partner with a lower security categorisation, which therefore cannot hold information whose loss would matter to the organisation
4. A partner operating in a different regulatory regime, whose obligations are set by another supervisor and so cannot be relied upon

Challenge yourself on this topic → Study as cards