Study. uk . com
  1. Home
  2. All questions
  3. Question 298

CISM study material · question 298 of 1000

On what two things does the quality of a quantitative risk analysis depend, according to IR 8286?

  1. The seniority of the analyst and the size of the sample
  2. The frequency of assessment and the age of the data
  3. How accurate the assigned values are and whether the statistical models are sound
  4. The number of risks analysed and the tooling employed
Show the answer

Answer: C. How accurate the assigned values are and whether the statistical models are sound

IR 8286 builds quantitative analysis on numeric impact and likelihood drawn from statistical probability and monetised valuation, so its worth rests on those numbers being right and the models behind them holding up.

Source: NIST IR 8286 (NIST) — Sec. 3.3.1 Risk Analysis Types

Challenge yourself on this topic → Study as cards