Study. uk . com
  1. Home
  2. All questions
  3. Question 205

CISM study material · question 205 of 1000

An analyst wants to convey that a risk estimate is uncertain without abandoning the estimate. Which two techniques does SP 800-30 suggest? Choose two.

  1. Using visual representations of fuzzy regions rather than points
  2. Recording the estimate only in the risk detail record
  3. Providing ranges of values rather than single values
  4. Deferring the estimate until the uncertainty resolves
Show the answer

Answer: C. Providing ranges of values rather than single values
A. Using visual representations of fuzzy regions rather than points

SP 800-30 says the degree of uncertainty can be communicated in the form of the results, by expressing them qualitatively, providing ranges of values rather than single values, or using visual representations of fuzzy regions rather than points.

Source: NIST SP 800-30 Rev. 1 (NIST) — Sec. 2.3.1 Risk Models — Uncertainty

Challenge yourself on this topic → Study as cards