nerdexam
Isaca

CRISC · Question #57

Which of the following would be the result of a significant increase in the motivation of a malicious threat actor?

The correct answer is C. Increase in risk event likelihood. A significant increase in a malicious threat actor's motivation directly leads to an increase in the likelihood of a risk event occurring, as they are more determined to overcome defenses.

Submitted by olafpl· Apr 18, 2026IT Risk Assessment

Question

Which of the following would be the result of a significant increase in the motivation of a malicious threat actor?

Options

  • AIncrease in mitigating control costs
  • BIncrease in risk event impact
  • CIncrease in risk event likelihood
  • DIncrease in cybersecurity premium

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    7% (2)
  • C
    89% (24)

Why each option

A significant increase in a malicious threat actor's motivation directly leads to an increase in the likelihood of a risk event occurring, as they are more determined to overcome defenses.

AIncrease in mitigating control costs

An increase in mitigating control costs might be a response to increased threat actor motivation, but it is not a direct result of their motivation itself.

BIncrease in risk event impact

The impact of a risk event is determined by the value of the affected assets and the damage caused, which is generally independent of the threat actor's motivation for carrying out the attack.

CIncrease in risk event likelihoodCorrect

Increased motivation in a malicious threat actor means they are more likely to expend greater effort, time, and resources to identify vulnerabilities, bypass security controls, and ultimately succeed in executing an attack. This direct correlation makes the occurrence of a risk event (e.g., a successful breach) more probable, thus increasing its likelihood.

DIncrease in cybersecurity premium

An increase in cybersecurity premium is a financial consequence, potentially influenced by overall risk perception, but not a direct result of an individual threat actor's motivation.

Concept tested: Risk assessment components (Likelihood)

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-30r1.pdf

Topics

#Risk Assessment#Threat Actor#Risk Likelihood#Risk Components

Community Discussion

No community discussion yet for this question.

Full CRISC Practice