- Home
- All questions
- Question 297
CISM study material · question 297 of 1000
In which two circumstances does IR 8286 say qualitative analysis is most useful? Choose two.
Show the answer
Answer: D. As an initial assessment
B. Where intangible aspects of risk must be considered
IR 8286 puts qualitative work where numbers are not yet available or not the point — a first pass, or where the impact is intangible. Monetised cost-benefit comparison is quantitative territory.
Source: NIST IR 8286 (NIST) — Sec. 3.3.1 Risk Analysis Types