Which of the following terms describes the determination of the effect of changes to the information system on the security of the information system?

Question

Options

• AVerification
• BAuthentication
• CImpact analysis
• DValidation analysis

• A
  7% (1)
• B
  14% (2)
• C
  71% (10)
• D
  7% (1)

Explanation

Impact analysis (C) is correct because it specifically refers to evaluating how proposed or actual changes to an information system affect its security posture - assessing risks, vulnerabilities, or compliance implications that the change may introduce.

• Verification (A) is about confirming that a system or component meets its specified requirements - it checks correctness, not change effects on security.
• Authentication (B) is the process of confirming identity (who you are), entirely unrelated to evaluating system changes.
• Validation analysis (D) is a plausible-sounding distractor, but validation checks whether a system fulfills its intended use; it doesn't specifically address the security consequences of changes.

Memory tip: Think of "impact" as the ripple effect - when you drop a change into a system, impact analysis maps where the security ripples reach.

No community discussion yet for this question.