Study. uk . com
  1. Home
  2. All questions
  3. Question 206

CISM study material · question 206 of 1000

An organisation must compare the cost-effectiveness of several competing risk responses. Which assessment approach does SP 800-30 say supports this best?

  1. Quantitative, because its numbers keep their meaning and proportionality outside the assessment
  2. Qualitative, because it communicates most clearly to the decision makers who must choose between the options
  3. Any of the three, since all of them support cost-benefit comparison equally once the results have been ranked
  4. Semi-quantitative, because it uses bins that translate into words
Show the answer

Answer: A. Quantitative, because its numbers keep their meaning and proportionality outside the assessment

SP 800-30 states quantitative assessments use numbers whose meanings and proportionality are maintained inside and outside the assessment context, and that this type most effectively supports cost-benefit analyses of alternative risk responses.

Source: NIST SP 800-30 Rev. 1 (NIST) — Sec. 2.3.2 Assessment Approaches

Challenge yourself on this topic → Study as cards