CGRC · Question #332
The threats to an information system and its environment of operation have been classified as human, natural, and machine threats. Which of the following threats is refferred to as the number one thre
The correct answer is A. Human threat. Among human, natural, and machine threats, human threats are consistently identified as the number one threat to information systems due to errors, negligence, or malicious actions.
Question
The threats to an information system and its environment of operation have been classified as human, natural, and machine threats. Which of the following threats is refferred to as the number one threat? Response:
Options
- AHuman threat
- BAdvanced persistent threats
- CNatural threat
- DMachine threats
How the community answered
(38 responses)- A87% (33)
- B5% (2)
- C3% (1)
- D5% (2)
Why each option
Among human, natural, and machine threats, human threats are consistently identified as the number one threat to information systems due to errors, negligence, or malicious actions.
Human threats are widely considered the number one threat to information systems because they encompass a broad range of vulnerabilities, including unintentional errors, negligence, social engineering, and malicious insider activity, all of which can lead to significant security incidents. These human factors are often exploited by attackers or directly compromise security through lack of awareness or malice.
Advanced persistent threats (APTs) are a type of sophisticated cyberattack, which often exploit human vulnerabilities, but "human threat" is a broader category that includes unintentional actions, not just sophisticated attacks.
Natural threats, such as floods or earthquakes, are significant for business continuity but typically cause less frequent and varied asset losses compared to human actions in an IT context.
Machine threats, like hardware failures or software bugs, can cause disruptions or data loss but are often mitigated through redundancy and patching, and human actions (e.g., misconfiguration, lack of updates) often exacerbate their impact.
Concept tested: Common threat categories and prevalence
Topics
Community Discussion
No community discussion yet for this question.