Information Systems Security Architecture Professional (ISSAP) Practice Exam

Session length

1 / 20

Which statement best describes threat intelligence in ISSAP decisions?

Threat intelligence provides data about current threat actors and indicators; informs risk assessment, controls prioritization, and security monitoring.

Threat intelligence helps security architects connect what attackers are doing now with the organization’s risk posture, guiding both controls prioritization and ongoing detection. It provides up-to-date information on threat actors, their techniques, and indicators of compromise, which informs risk assessments, helps decide which security controls to prioritize, and tunes security monitoring to detect relevant activity. This forward-looking, contextual view ensures resources are focused on the most plausible and impactful threats and that detections align with real-world attacker behavior. It isn’t limited to historical incident counts, nor does it replace risk assessment, and it isn’t solely about legal compliance.

Threat intelligence is only used for historical incident counts.

Threat intelligence replaces risk assessment entirely.

Threat intelligence is used only for legal compliance.

Next Question
Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy