NISTNIST CSFProfiles RiskEASYFree question
What is a threat in cybersecurity risk assessment?
- A.The financial cost of a security incident
- B.A specific vulnerability in a software application
- C.Any circumstance or event with the potential to adversely impact organizational operations through unauthorized access, destruction, or disclosure
- D.A security control that has been implemented
Why C is correct
A threat is any circumstance or event with the potential to adversely impact organizational operations, assets, or individuals through unauthorized access, destruction, disclosure, or modification of information.
Know someone studying for NIST CSF? Send them this one.