Which of the following approaches to cyber security takes a bottom-up approach to assessing vulnerabilities meticulously item by item?

This is the component approach - it looks at each individual component (each part of the IT system)

in turn to check its okay. When a component is not directly controlled by the organisation (e.g.

something to do with a supplier) this is called a dependency. Component approach is a bottom-up

approach and is the opposite of the top-down approach which is called the 'system driven approach'.

P.179

Domain: 3.2