Study. uk . com
  1. Home
  2. All questions
  3. Question 7

CompTIA Security+ study material · question 7 of 611

An assessment notes that the organisation has no central asset inventory, which makes many threat events more likely to succeed. In risk-model terms, what has been described?

  1. A predisposing condition
  2. A compensating control
  3. An authorisation boundary
  4. A threat scenario
Show the answer

Answer: A. A predisposing condition

A predisposing condition is an organisational or system property that raises the chance of success, distinct from a specific technical flaw.

Source: NIST SP 800-30 Rev. 1 (NIST) — SP 800-30 Rev. 1 § 2.3.1 Vulnerabilities and Predisposing Conditions

Challenge yourself on this topic → Study as cards