Study. uk . com
  1. Home
  2. All questions
  3. Question 236

CISM study material · question 236 of 1000

Which two costs does SP 800-39 attribute to the extremes of risk tolerance? Choose two.

  1. A very tolerant organisation may buy near-term efficiency at the cost of later failure
  2. A tolerant organisation cannot obtain external audit certification
  3. An intolerant organisation always overspends on insurance
  4. A very intolerant organisation may forgo capability it actually needs
Show the answer

Answer: D. A very intolerant organisation may forgo capability it actually needs
A. A very tolerant organisation may buy near-term efficiency at the cost of later failure

SP 800-39 warns less risk-tolerant organisations may fail to achieve needed capabilities in avoiding apparently unacceptable risk, while more tolerant ones may focus on near-term efficiencies at the expense of setting themselves up for future failure.

Source: NIST SP 800-39 (NIST) — Sec. 2.3.3 Risk Management Strategy

Challenge yourself on this topic → Study as cards