CGRC · Question #227
An occurrence that actually or potentially jeopardizes the confidentiality, integrity, or availability of an information system or the information the system processes, stores, or transmits or that…
The correct answer is A. Incident. The description accurately defines an information security incident as any occurrence that actually or potentially jeopardizes system security or violates security policies.
Question
An occurrence that actually or potentially jeopardizes the confidentiality, integrity, or availability of an information system or the information the system processes, stores, or transmits or that constitutes a violation or imminent threat of violation of security policies, security procedures, or acceptable use policies. Response:
Options
- AIncident
- BIncremental
- CImminent
- DInformation
How the community answered
(21 responses)- A95% (20)
- C5% (1)
Why each option
The description accurately defines an information security incident as any occurrence that actually or potentially jeopardizes system security or violates security policies.
An "Incident" is correctly defined as an actual or potential occurrence that jeopardizes the confidentiality, integrity, or availability of an information system or information, or constitutes a violation of security policies, procedures, or acceptable use policies.
"Incremental" refers to a type of backup or a gradual increase, unrelated to a security event.
"Imminent" means about to happen, describing a threat's proximity, not the event itself.
"Information" refers to data itself, not an occurrence affecting its security.
Concept tested: Security incident definition
Source: https://csrc.nist.gov/glossary/term/information-security-incident
Topics
Community Discussion
No community discussion yet for this question.