Exam NIST-COBIT-2019 Topic 2 Question 2 Discussion
Actual exam question for ISACA's NIST-COBIT-2019 exam
Question #: 2
Topic #: 2
Question #: 2
Topic #: 2
Which of the following should an organization review to gain a better understanding of the likelihood and impact of cybersecurity events?
Suggested Answer: C Vote an answer
According to the NIST Cybersecurity Framework, an organization should review cyber threat information from internal and external sources to gain a better understanding of the likelihood and impact of cybersecurity events. This information can help the organization to identify potential threats, vulnerabilities, and consequences, and to assess the current and target profiles of its cybersecurity posture12.
ReferencesIdentifying and Estimating Cybersecurity Risk for Enterprise Risk Management, page 19.COBIT VS NIST : A Comprehensive Analysis - ITSM Docs
ReferencesIdentifying and Estimating Cybersecurity Risk for Enterprise Risk Management, page 19.COBIT VS NIST : A Comprehensive Analysis - ITSM Docs
by Arno at Sep 26, 2025, 02:41 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).