Which of the following would MOST likely cause an organization to review and potentially rebaseline its current risk assessment?

The correct answer is A. Emergence of a new class of threats. A risk assessment baseline represents the organization's understanding of threats, vulnerabilities, and potential impacts at a given point in time. The emergence of a new class of threats (e.g., a new attack technique, threat actor category, or exploitation method)…

Risk Management

Question

Options

AEmergence of a new class of threats
BDecommissioning of a backup server
CImplementation of a new access control system
DReduction in the attack surface

How the community answered

(16 responses)

A
75% (12)
B
6% (1)
C
13% (2)
D
6% (1)

Explanation

A risk assessment baseline represents the organization's understanding of threats, vulnerabilities, and potential impacts at a given point in time. The emergence of a new class of threats (e.g., a new attack technique, threat actor category, or exploitation method) fundamentally changes the threat landscape in ways the existing assessment could not have anticipated. This invalidates prior threat modeling and likelihood/impact calculations, necessitating a full rebaseline. Decommissioning a backup server (B), implementing a new access control system (C), or reducing the attack surface (D) are changes to assets or controls that warrant updating the assessment incrementally, but they do not introduce unknown threat vectors that require rebaselining the entire risk framework.

Topics

#risk assessment#risk rebaseline#threat landscape#risk management

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice