nerdexam
(ISC)2

CGRC · Question #332

The threats to an information system and its environment of operation have been classified as human, natural, and machine threats. Which of the following threats is refferred to as the number one thre

The correct answer is A. Human threat. Among human, natural, and machine threats, human threats are consistently identified as the number one threat to information systems due to errors, negligence, or malicious actions.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

The threats to an information system and its environment of operation have been classified as human, natural, and machine threats. Which of the following threats is refferred to as the number one threat? Response:

Options

  • AHuman threat
  • BAdvanced persistent threats
  • CNatural threat
  • DMachine threats

How the community answered

(38 responses)
  • A
    87% (33)
  • B
    5% (2)
  • C
    3% (1)
  • D
    5% (2)

Why each option

Among human, natural, and machine threats, human threats are consistently identified as the number one threat to information systems due to errors, negligence, or malicious actions.

AHuman threatCorrect

Human threats are widely considered the number one threat to information systems because they encompass a broad range of vulnerabilities, including unintentional errors, negligence, social engineering, and malicious insider activity, all of which can lead to significant security incidents. These human factors are often exploited by attackers or directly compromise security through lack of awareness or malice.

BAdvanced persistent threats

Advanced persistent threats (APTs) are a type of sophisticated cyberattack, which often exploit human vulnerabilities, but "human threat" is a broader category that includes unintentional actions, not just sophisticated attacks.

CNatural threat

Natural threats, such as floods or earthquakes, are significant for business continuity but typically cause less frequent and varied asset losses compared to human actions in an IT context.

DMachine threats

Machine threats, like hardware failures or software bugs, can cause disruptions or data loss but are often mitigated through redundancy and patching, and human actions (e.g., misconfiguration, lack of updates) often exacerbate their impact.

Concept tested: Common threat categories and prevalence

Topics

#Threat classification#Human threats#Cybersecurity fundamentals#Risk identification

Community Discussion

No community discussion yet for this question.

Full CGRC Practice