CISSP-ISSEP · Question #126
Which of the following characteristics are described by the DIAP Information Readiness Assessment function? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is A. It performs vulnerabilitythreat analysis assessment. C. It provides data needed to accurately assess IA readiness. D. It identifies and generates IA requirements.. A, C, and D all describe core functions of the DIAP Information Readiness Assessment (IRA): it conducts vulnerability and threat analysis (A) to understand the risk landscape, provides the data necessary to accurately gauge an organization's IA readiness posture (C), and identifi
Question
Which of the following characteristics are described by the DIAP Information Readiness Assessment function? Each correct answer represents a complete solution. Choose all that apply.
Options
- AIt performs vulnerabilitythreat analysis assessment.
- BIt provides for entry and storage of individual system data.
- CIt provides data needed to accurately assess IA readiness.
- DIt identifies and generates IA requirements.
How the community answered
(23 responses)- A87% (20)
- B13% (3)
Explanation
A, C, and D all describe core functions of the DIAP Information Readiness Assessment (IRA): it conducts vulnerability and threat analysis (A) to understand the risk landscape, provides the data necessary to accurately gauge an organization's IA readiness posture (C), and identifies and generates the specific IA requirements needed to address gaps (D). Together, these three form a cohesive assessment-to-requirements pipeline that is the defining purpose of the IRA function.
Why B is wrong: Providing entry and storage of individual system data describes a data registry or inventory management function - that's characteristic of a system tracking tool, not the readiness assessment function. The IRA consumes and analyzes data; it doesn't serve as a storage mechanism for individual system records.
Memory tip: Think of the IRA as an analyst, not a librarian. An analyst examines threats (A), delivers findings (C), and prescribes requirements (D). A librarian stores individual records (B) - that's someone else's job.
Topics
Community Discussion
No community discussion yet for this question.