nerdexam
(ISC)2

CGRC · Question #306

A measure of the degree to which an organization depends on the information or information system for the success of a mission or of a business function best defines which of the following? Response:

The correct answer is A. Criticality. Criticality measures how much an organization depends on an information system or information for the successful execution of its mission or business functions.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

A measure of the degree to which an organization depends on the information or information system for the success of a mission or of a business function best defines which of the following? Response:

Options

  • ACriticality
  • BSensitivity
  • CAssurance
  • DConfidentiality

How the community answered

(46 responses)
  • A
    96% (44)
  • B
    2% (1)
  • D
    2% (1)

Why each option

Criticality measures how much an organization depends on an information system or information for the successful execution of its mission or business functions.

ACriticalityCorrect

Criticality quantifies the essential nature of an information system or the information it processes to an organization's core operations and mission success. A highly critical system's disruption would have severe consequences, impacting the organization's ability to achieve its objectives.

BSensitivity

Sensitivity refers to the potential impact of unauthorized disclosure of information, rather than operational reliance.

CAssurance

Assurance indicates the confidence that security controls are correctly implemented and operating as intended, not operational dependency.

DConfidentiality

Confidentiality is the security principle of preventing unauthorized information disclosure, one aspect of security, but not the overall measure of mission reliance.

Concept tested: Information System Criticality Definition

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-30r1.pdf

Topics

#Criticality#Risk Management Concepts#Information System Importance#Impact Assessment

Community Discussion

No community discussion yet for this question.

Full CGRC Practice