Study. uk . com
  1. Home
  2. All questions
  3. Question 235

CISM study material · question 235 of 1000

Two organisations adopt the same technology, but one demands far more assessment before deployment. Which factor does SP 800-39 identify as the cause?

  1. Their relative degree of risk tolerance, which drives how much assurance they need before trusting the technology
  2. The size of each organisation's technical team, since a larger team can complete more assessment work before the deadline falls
  3. The maturity of the technology in each organisation's own market, since a product proven elsewhere needs less scrutiny here
  4. The vendor's differing contractual terms, since a stronger warranty is taken to remove the need for the buyer to assess that product for itself
Show the answer

Answer: A. Their relative degree of risk tolerance, which drives how much assurance they need before trusting the technology

SP 800-39 states risk tolerance affects requirements for trustworthiness: two organisations may choose the same technologies, but their relative degree of risk tolerance may change the degree of assessment required prior to deployment.

Source: NIST SP 800-39 (NIST) — Sec. 2.3.3 Risk Management Strategy

Challenge yourself on this topic → Study as cards