nerdexam
(ISC)2

CGRC · Question #10

What would be the impact level due to the loss of CIA that could be expected to have a severe or catastrophic adverse effect on organizational operations, organizational assets, individuals, other…

The correct answer is D. High impact level. A high impact level indicates that the loss of confidentiality, integrity, or availability (CIA) would result in severe or catastrophic adverse effects on organizational operations, assets, individuals, or the nation.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

What would be the impact level due to the loss of CIA that could be expected to have a severe or catastrophic adverse effect on organizational operations, organizational assets, individuals, other organizations or the nation? Response:

Options

  • ALow impact level
  • BMedium impact level
  • CModerate impact level
  • DHigh impact level

How the community answered

(28 responses)
  • B
    4% (1)
  • D
    96% (27)

Why each option

A high impact level indicates that the loss of confidentiality, integrity, or availability (CIA) would result in severe or catastrophic adverse effects on organizational operations, assets, individuals, or the nation.

ALow impact level

A low impact level implies limited adverse effects that do not involve significant degradation of organizational capabilities or mission.

BMedium impact level

Medium impact level is not a standard impact category in many frameworks; it typically falls under 'Moderate' or between low and high.

CModerate impact level

A moderate impact level indicates serious adverse effects, causing significant degradation, but not severe or catastrophic, which is reserved for 'High' impact.

DHigh impact levelCorrect

A high impact level is characterized by a severe or catastrophic adverse effect resulting from the loss of confidentiality, integrity, or availability. This includes major damage to organizational operations, assets, individuals, or the nation, leading to significant financial loss, legal penalties, or loss of life.

Concept tested: NIST impact levels for security incidents

Source: https://csrc.nist.gov/glossary/term/impact-level

Topics

#Impact levels#Security categorization#Risk assessment#FIPS 199

Community Discussion

No community discussion yet for this question.

Full CGRC Practice