nerdexam
(ISC)2

CGRC · Question #697

The term __________ relates to the system as a whole where as Sensitivity relates to the data that the system processes. Response:

The correct answer is A. Criticality. Criticality refers to the importance of a system's function to an organization's mission or business objectives, while sensitivity pertains specifically to the confidentiality requirements of the data handled by that system. The question highlights how criticality relates to…

Scope of the System

Question

The term __________ relates to the system as a whole where as Sensitivity relates to the data that the system processes. Response:

Options

  • ACriticality
  • BSensitivity
  • CAvailability

How the community answered

(36 responses)
  • A
    86% (31)
  • B
    8% (3)
  • C
    6% (2)

Why each option

Criticality refers to the importance of a system's function to an organization's mission or business objectives, while sensitivity pertains specifically to the confidentiality requirements of the data handled by that system. The question highlights how criticality relates to the entire system, distinguishing it from data sensitivity.

ACriticalityCorrect

Criticality, in the context of information systems, refers to the essential nature of the system's function and its impact on the organization's mission or business operations if it were to become unavailable or compromised. This distinguishes it from data sensitivity, which focuses on the confidentiality needs of the information itself, or availability, which is a security goal rather than an inherent system attribute.

BSensitivity

Sensitivity relates to the data, specifically its confidentiality, not the system as a whole.

CAvailability

Availability is one of the three pillars of information security (Confidentiality, Integrity, Availability), referring to the system being accessible when needed, but it does not describe the overall importance of the system in the same way criticality does.

Concept tested: System criticality vs. data sensitivity

Source: https://csrc.nist.gov/glossary/term/criticality

Topics

#System Criticality#Data Sensitivity#Information Categorization#Risk Management Fundamentals

Community Discussion

No community discussion yet for this question.

Full CGRC Practice