CRISC · Question #57
Which of the following would be the result of a significant increase in the motivation of a malicious threat actor?
The correct answer is C. Increase in risk event likelihood. A significant increase in a malicious threat actor's motivation directly leads to an increase in the likelihood of a risk event occurring, as they are more determined to overcome defenses.
Question
Which of the following would be the result of a significant increase in the motivation of a malicious threat actor?
Options
- AIncrease in mitigating control costs
- BIncrease in risk event impact
- CIncrease in risk event likelihood
- DIncrease in cybersecurity premium
How the community answered
(27 responses)- A4% (1)
- B7% (2)
- C89% (24)
Why each option
A significant increase in a malicious threat actor's motivation directly leads to an increase in the likelihood of a risk event occurring, as they are more determined to overcome defenses.
An increase in mitigating control costs might be a response to increased threat actor motivation, but it is not a direct result of their motivation itself.
The impact of a risk event is determined by the value of the affected assets and the damage caused, which is generally independent of the threat actor's motivation for carrying out the attack.
Increased motivation in a malicious threat actor means they are more likely to expend greater effort, time, and resources to identify vulnerabilities, bypass security controls, and ultimately succeed in executing an attack. This direct correlation makes the occurrence of a risk event (e.g., a successful breach) more probable, thus increasing its likelihood.
An increase in cybersecurity premium is a financial consequence, potentially influenced by overall risk perception, but not a direct result of an individual threat actor's motivation.
Concept tested: Risk assessment components (Likelihood)
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-30r1.pdf
Topics
Community Discussion
No community discussion yet for this question.