- Home
- All questions
- Question 140
CISM study material · question 140 of 1000
Two experienced assessors reach different risk conclusions from the same evidence. How does SP 800-39 treat this outcome?
Show the answer
Answer: A. As expected, since culture and personal experience colour judgement, and as something a defined process must reconcile
SP 800-39 accepts that assessors can reach different conclusions from the same information because of culture and personal experience, and asks that organisationally defined processes identify and resolve such inconsistencies.
Source: NIST SP 800-39 (NIST) — Task 2-2 Risk Determination and Uncertainty