SISA CSPAI Exam - Topic 5 Question 10 Discussion

Actual exam question for SISA's CSPAI exam

Question #: 10
Topic #: 5

[All CSPAI Questions]

What does the OCTAVE model emphasize in GenAI risk assessment?

AOperational Critical Threat, Asset, and Vulnerability Evaluation focused on organizational risks.

BSolely technical vulnerabilities in AI models.

CShort-term tactical responses over strategic planning.

DExclusion of stakeholder input in assessments.

Show Suggested Answer

Suggested Answer: A

by Hana at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium CSPAI Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Eladia

3 days ago

D) Excluding stakeholders? That's a hard pass. Can't have a proper risk assessment without their input.

upvoted 0 times

...

Mary

8 days ago

B) Nah, that's way too narrow. OCTAVE is all about the big picture, not just the technical stuff.

upvoted 0 times

...

Judy

13 days ago

A) Sounds like the right answer to me. Gotta focus on those organizational risks, am I right?

upvoted 0 times

...

Rikki

18 days ago

I vaguely recall that OCTAVE is about evaluating threats and vulnerabilities, so A sounds familiar, but I need to double-check my notes.

upvoted 0 times

...

Pamella

23 days ago

I feel like the focus is definitely on operational risks rather than just technical ones, so A seems right, but I could be mixing it up with another model.

upvoted 0 times

...

Lonna

29 days ago

I remember a practice question that emphasized the importance of including stakeholders in the assessment process, which makes me doubt options C and D.

upvoted 0 times

...

Aliza

1 month ago

I think the OCTAVE model is more about assessing organizational risks, so I might lean towards A, but I'm not entirely sure.

upvoted 0 times

...

Gilma

1 month ago

I'm confident A is the correct answer. The OCTAVE model is specifically designed to assess operational risks to an organization, not just technical vulnerabilities.

upvoted 0 times

...

Jacob

1 month ago

A seems like the best answer here. The OCTAVE model is about evaluating critical threats, assets, and vulnerabilities from an organizational perspective.

upvoted 0 times

...

Shawnda

2 months ago

The question is asking about the emphasis of the OCTAVE model, so I'll need to remember what that model is all about. I'm leaning towards A, but I'll double-check my understanding.

upvoted 0 times

...

Paris

2 months ago

Hmm, I'm not too familiar with the OCTAVE model. I'll need to review my notes to figure this one out.

upvoted 0 times

...

Nikita

2 months ago

I think the OCTAVE model focuses on organizational risks, so I'd go with A.

upvoted 0 times

...