nerdexam
(ISC)2

CGRC · Question #1

An event or situation that has the potential for causing undesirable consequences or impact. Response:

The correct answer is A. Threat Event. A threat event is a specific occurrence or situation that has the potential to cause undesirable consequences or impact to an organization or its assets.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

An event or situation that has the potential for causing undesirable consequences or impact. Response:

Options

  • AThreat Event
  • BThreat Assessment
  • CThreat Source
  • DThreat Scenario

How the community answered

(18 responses)
  • A
    94% (17)
  • C
    6% (1)

Why each option

A threat event is a specific occurrence or situation that has the potential to cause undesirable consequences or impact to an organization or its assets.

AThreat EventCorrect

A threat event is defined as the manifestation of a threat, representing a specific instance or occurrence that could lead to harm or negative impact on an information system or organization. It is the realization of a potential threat.

BThreat Assessment

A threat assessment is the systematic process of identifying and evaluating potential threats, not the specific event itself.

CThreat Source

A threat source is the entity or agent (e.g., hacker, natural disaster) that initiates or exploits a vulnerability, not the event that materializes the threat.

DThreat Scenario

A threat scenario is a hypothetical description of how a threat event could occur and its potential impact, rather than the actual event.

Concept tested: Information security threat event definition

Source: https://csrc.nist.gov/glossary/term/threat-event

Topics

#Threat Event#Risk Management#Security Definitions

Community Discussion

No community discussion yet for this question.

Full CGRC Practice