nerdexam
(ISC)2

CGRC · Question #342

Any circumstance or event with the potential to adversely impact organizational operations, assets, personnel, etc..? Response:

The correct answer is A. Threat. A threat is defined as any circumstance or event with the potential to negatively impact an organization's operations, assets, or personnel.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Any circumstance or event with the potential to adversely impact organizational operations, assets, personnel, etc..? Response:

Options

  • AThreat
  • BEvent
  • CAttribute
  • DSystem

How the community answered

(29 responses)
  • A
    90% (26)
  • C
    7% (2)
  • D
    3% (1)

Why each option

A threat is defined as any circumstance or event with the potential to negatively impact an organization's operations, assets, or personnel.

AThreatCorrect

A threat is defined as any potential adverse occurrence that could exploit a vulnerability and cause harm to an organization's information systems, assets, or operations, aligning directly with the provided description.

BEvent

An event is any observable occurrence in a system or network, which may or may not be malicious, and is not inherently defined by its potential to adversely impact.

CAttribute

An attribute is a characteristic or property of an entity, not an adverse circumstance or event with potential for harm.

DSystem

A system is a collection of components working together to achieve a common goal, not a circumstance or event with adverse potential.

Concept tested: Definition of a security threat

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-30r1.pdf

Topics

#Threat definition#Risk management terminology#Security definitions

Community Discussion

No community discussion yet for this question.

Full CGRC Practice