nerdexam
(ISC)2

CISSP-ISSAP · Question #106

Which of the following are man-made threats that an organization faces? Each correct answer represents a complete solution. Choose three.

The correct answer is A. Theft B. Employee errors D. Frauds. Theft (A), employee errors (B), and fraud (D) are all man-made threats because they originate directly from human actions - whether intentional (theft, fraud) or unintentional (errors) - and represent deliberate or negligent acts that can compromise an organization's assets…

Architect for Governance, Risk, and Compliance

Question

Which of the following are man-made threats that an organization faces? Each correct answer represents a complete solution. Choose three.

Options

  • ATheft
  • BEmployee errors
  • CStrikes
  • DFrauds

How the community answered

(38 responses)
  • A
    89% (34)
  • C
    11% (4)

Explanation

Theft (A), employee errors (B), and fraud (D) are all man-made threats because they originate directly from human actions - whether intentional (theft, fraud) or unintentional (errors) - and represent deliberate or negligent acts that can compromise an organization's assets, data, or operations.

Strikes (C) is the distractor: while strikes involve people, they are classified as a labor/operational disruption rather than a direct security threat in most security frameworks. Strikes don't directly attack, steal, or damage organizational assets the way the other three do - they're a business continuity concern, not a threat vector.

Memory tip: Think "TED" - Theft, Errors, Deception (fraud). These three map directly to human-caused harm, whether someone takes something, accidentally breaks something, or deliberately deceives the organization. If an action doesn't fit that harm model (like workers walking out), it's not a man-made security threat.

Topics

#Threat classification#Man-made threats#Organizational risk

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSAP Practice