Study. uk . com
  1. Home
  2. All questions
  3. Question 192

CISM study material · question 192 of 1000

Which two estimates does SP 800-30 combine into the overall likelihood of a threat event? Choose two.

  1. The cost of the controls in place
  2. The magnitude of harm that would result
  3. The likelihood that the threat event is initiated or occurs
  4. The likelihood that, once initiated, it results in adverse impact
Show the answer

Answer: C. The likelihood that the threat event is initiated or occurs
D. The likelihood that, once initiated, it results in adverse impact

SP 800-30 combines the likelihood that a threat event will be initiated or occur with the likelihood that, once initiated, it results in adverse impacts, to produce an overall likelihood.

Source: NIST SP 800-30 Rev. 1 (NIST) — Sec. 2.3.1 Risk Models — Likelihood

Challenge yourself on this topic → Study as cards