CGRC · Question #306
A measure of the degree to which an organization depends on the information or information system for the success of a mission or of a business function best defines which of the following? Response:
The correct answer is A. Criticality. Criticality measures how much an organization depends on an information system or information for the successful execution of its mission or business functions.
Question
A measure of the degree to which an organization depends on the information or information system for the success of a mission or of a business function best defines which of the following? Response:
Options
- ACriticality
- BSensitivity
- CAssurance
- DConfidentiality
How the community answered
(46 responses)- A96% (44)
- B2% (1)
- D2% (1)
Why each option
Criticality measures how much an organization depends on an information system or information for the successful execution of its mission or business functions.
Criticality quantifies the essential nature of an information system or the information it processes to an organization's core operations and mission success. A highly critical system's disruption would have severe consequences, impacting the organization's ability to achieve its objectives.
Sensitivity refers to the potential impact of unauthorized disclosure of information, rather than operational reliance.
Assurance indicates the confidence that security controls are correctly implemented and operating as intended, not operational dependency.
Confidentiality is the security principle of preventing unauthorized information disclosure, one aspect of security, but not the overall measure of mission reliance.
Concept tested: Information System Criticality Definition
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-30r1.pdf
Topics
Community Discussion
No community discussion yet for this question.