Exam CIS-SIR topic 1 question 4 discussion

D is Correct: Incident Severity is influenced by the business value of the affected asset

eBook says D

Vancouver p. 71: "Incident severity is influenced by the business value of the affected asset"

D is correct (eBook Page # 59).

D seems correct.

Answer is D because Severity is influenced with Business Value of Asset i.e. either Business Service or CI selected in Security Incident

I am leaning towards B explanation: The severity of a security incident in ServiceNow is influenced by the impact of the incident, the size of your tech team, on-call schedules, high- and low-traffic times of day for your service, the frequency of incidents and other factors.

The correct answer is B. The impact, urgency, and priority of the incident. These factors play a significant role in determining the severity level of a security incident. The severity field reflects the technical severity or criticality of the incident based on its potential impact, urgency for resolution, and the assigned priority. By considering the impact, urgency, and priority, organizations can assess the severity of an incident and allocate appropriate resources and response efforts accordingly. While the cost of the response to the security breach (option A), the time taken to resolve the security incident (option C), and the business value of the affected asset (option D) may be important considerations in incident response, they are not direct influences on the severity field in ServiceNow's Security Incident module. However, these factors can indirectly impact the assessment of impact, urgency, and priority, which, in turn, can contribute to determining the severity of the incident.

d is correct