Certified in Risk and Information Systems Control (CRISC) — Question 1077

Which of the following are true for threats?
Each correct answer represents a complete solution. (Choose three.)

Answer options

Correct answer: A, B, D

Explanation

Answers A, B, and D are correct because threats can fluctuate in urgency over time, can originate from outside sources, and can be considered as tangible risks. Answer C is incorrect as it lacks specificity and clarity, and answer E is not accurate since threats may not persist indefinitely if addressed properly.