At a county board workshop, three people mention phishing in the sa…

Question

At a county board workshop, three people mention phishing in the same hour, so the facilitator labels phishing 'high likelihood.' What mistake does this reflect?

Accepted Answer

Treating how often a topic is discussed as if it were the probability the event will occur. — Hearing a risk three times in a meeting is not the same as it being likely to happen. Popularity is chatter; likelihood is chance of occurrence. Score probability from evidence, not from who talked the loudest.

Answer

Using vendor patch notes as the only evidence when scoring consequence severity.

Answer

Requiring every risk to share the same residual rating after insurance is purchased.

Answer

Banning qualitative scales whenever more than two stakeholders speak in a meeting.

At a county board workshop, three people mention phishing in the same hour, so the facilitator labels phishing 'high likelihood.' What mistake does this reflect?

Short Explanation

Full Explanation