Câu 15: CT-SEC: Certified Tester Security Tester

You have been assigned to perform the risk assessment for an internal project in your organization. You choose to involve customers, regulatory agencies or standards recommended/mandated by them. Which ONE of the following options represents a type of security threat that you are likely to miss because of the inadequate involvement of certain types of stakeholders, such as the public/community?

1. A. You are likely to miss threat sources arising from internal threats. — đáp án hiện tại
2. B. You should only consider the stakeholders that might be impacted by security threats.
3. C. You are applying the principle that security threats are independent of the asset to be protected.
4. D. You are taking into account the likelihood of the occurrence of a given security threat.