Study. uk . com
  1. Home
  2. All questions
  3. Question 304

CISM study material · question 304 of 1000

Which two techniques does IR 8286 name for estimating the probability that a risk event will occur? Choose two.

  1. Event tree analysis
  2. Business impact analysis
  3. SWOT analysis
  4. Bayesian analysis
Show the answer

Answer: D. Bayesian analysis
A. Event tree analysis

IR 8286 offers Bayesian analysis, Monte Carlo simulation and event tree analysis as ways of putting a probability on a risk event. SWOT and business impact analysis serve other purposes.

Source: NIST IR 8286 (NIST) — Sec. 3.3.2 Techniques for Estimating Likelihood and Impact

Challenge yourself on this topic → Study as cards