- Home
- All questions
- Question 205
CISM study material · question 205 of 1000
An analyst wants to convey that a risk estimate is uncertain without abandoning the estimate. Which two techniques does SP 800-30 suggest? Choose two.
Show the answer
Answer: C. Providing ranges of values rather than single values
A. Using visual representations of fuzzy regions rather than points
SP 800-30 says the degree of uncertainty can be communicated in the form of the results, by expressing them qualitatively, providing ranges of values rather than single values, or using visual representations of fuzzy regions rather than points.
Source: NIST SP 800-30 Rev. 1 (NIST) — Sec. 2.3.1 Risk Models — Uncertainty