CRISC Certified in Risk and Information Systems ControlIT Risk AssessmentHard
A global manufacturing company is conducting its annual IT risk assessment. The risk team identifies a potential supply chain disruption due to a cyber-attack on a critical third-party logistics provider. To ensure this risk scenario is comprehensive and actionable, which of the following elements is MOST crucial to include?
- AThe specific threat actors, their motivations, and potential attack vectors.
- BThe current market value of the company's stock.
- CA detailed history of all past cyber-attacks against the company.
- DA list of all employees in the IT department involved in the assessment.
Show answer & explanationAnswer & explanation
Correct answer: A. The specific threat actors, their motivations, and potential attack vectors.
For a risk scenario to be comprehensive and actionable, it must clearly define the threat. Understanding the specific threat actors (who), their motivations (why), and potential attack vectors (how) provides the necessary detail to develop targeted mitigation strategies and response plans.
Why the other options are wrong
- B. The company's stock market value is a high-level financial impact indicator, not a specific component of a detailed risk scenario.
- C. Past incidents are useful for historical context but are not a core element of describing a forward-looking risk scenario.
- D. While team members are involved, their personal list is not a core component of the risk scenario itself.
Actionable Risk Scenarios
Detailed descriptions of potential risk events that include sufficient information to allow for effective risk assessment, analysis, and the development of targeted mitigation strategies.
- Focus on specific threats, vulnerabilities, and assets.
- Provide context on actors, motivations, and impact.
- Enable clear understanding for decision-making and response planning.
Memory trick: An actionable map shows WHO, WHAT, WHERE, WHEN, WHY, and HOW to avoid danger.