NISTNIST CSFProfiles RiskEASYFree question
What factors should be considered when assessing the impact of a cybersecurity risk?
- A.Number of open vulnerabilities, age of the assets, patch cadence, scanner coverage, and the licence cost per host
- B.Attacker skill, exploit availability, threat actor motivation, tooling maturity, and the frequency of past attempts
- C.Staff headcount, office locations, network bandwidth, hardware refresh cycle, and the number of cloud accounts
- D.Financial loss, operational disruption, reputational damage, legal consequences, and harm to individuals
Why D is correct
Impact assessment should consider multiple dimensions including financial loss, operational disruption, reputational damage, legal and regulatory consequences, and potential harm to individuals.
Know someone studying for NIST CSF? Send them this one.