Understanding the Threats GSTRT Practice Questions (Page 10)

Questions 46–46

1. 46expert · hard · select all that apply

   A large hospital network is conducting a threat analysis for its electronic health record (EHR) system. The system is critical to patient care and contains highly sensitive data. The threat modeling team has identified several threats and is using a structured methodology to assess them. The team must consider the likelihood and impact of each threat, as well as the organization's risk tolerance. Which of the following are appropriate steps in this structured threat analysis process? (Select all that apply.)

   • ACharacterize each threat by its source, motivation, and capability.
   • BPrioritize threats based on the highest impact to patient safety, regardless of likelihood.
   • CUse threat intelligence to inform the likelihood of each threat being exploited in the healthcare sector.
   • DIdentify the assets that are most critical to patient care and data confidentiality.
   • EAssign a quantitative likelihood score based solely on the number of vulnerabilities found.
   Check answers Discussion Select an answer first