CGRC · Question #10
What would be the impact level due to the loss of CIA that could be expected to have a severe or catastrophic adverse effect on organizational operations, organizational assets, individuals, other…
The correct answer is D. High impact level. A high impact level indicates that the loss of confidentiality, integrity, or availability (CIA) would result in severe or catastrophic adverse effects on organizational operations, assets, individuals, or the nation.
Question
What would be the impact level due to the loss of CIA that could be expected to have a severe or catastrophic adverse effect on organizational operations, organizational assets, individuals, other organizations or the nation? Response:
Options
- ALow impact level
- BMedium impact level
- CModerate impact level
- DHigh impact level
How the community answered
(28 responses)- B4% (1)
- D96% (27)
Why each option
A high impact level indicates that the loss of confidentiality, integrity, or availability (CIA) would result in severe or catastrophic adverse effects on organizational operations, assets, individuals, or the nation.
A low impact level implies limited adverse effects that do not involve significant degradation of organizational capabilities or mission.
Medium impact level is not a standard impact category in many frameworks; it typically falls under 'Moderate' or between low and high.
A moderate impact level indicates serious adverse effects, causing significant degradation, but not severe or catastrophic, which is reserved for 'High' impact.
A high impact level is characterized by a severe or catastrophic adverse effect resulting from the loss of confidentiality, integrity, or availability. This includes major damage to organizational operations, assets, individuals, or the nation, leading to significant financial loss, legal penalties, or loss of life.
Concept tested: NIST impact levels for security incidents
Source: https://csrc.nist.gov/glossary/term/impact-level
Topics
Community Discussion
No community discussion yet for this question.