Study. uk . com
  1. Home
  2. All questions
  3. Question 204

CISM study material · question 204 of 1000

Which two sources of uncertainty in risk evaluation does SP 800-30 identify? Choose two.

  1. Limits on the extent to which the future will resemble the past
  2. Disagreement between the assessor and the risk owner about how an entry should be rated
  3. Unrecognised dependencies that lead to unforeseen impacts
  4. Delays in publishing the completed assessment report to stakeholders
Show the answer

Answer: A. Limits on the extent to which the future will resemble the past
C. Unrecognised dependencies that lead to unforeseen impacts

SP 800-30 attributes uncertainty to limits on how far the future resembles the past, imperfect knowledge of the threat, undiscovered vulnerabilities in technologies, and unrecognised dependencies leading to unforeseen impacts.

Source: NIST SP 800-30 Rev. 1 (NIST) — Sec. 2.3.1 Risk Models — Uncertainty

Challenge yourself on this topic → Study as cards