Study. uk . com
  1. Home
  2. All questions
  3. Question 330

CISM study material · question 330 of 1000

Which two questions does establishing the scope of a risk assessment answer, under SP 800-30? Choose two.

  1. Who will sign the resulting report
  2. Which decisions the assessment results support
  3. How long the assessment results remain relevant
  4. Which controls will be selected as a result
Show the answer

Answer: B. Which decisions the assessment results support
C. How long the assessment results remain relevant

SP 800-30 says establishing scope helps determine which tiers are addressed, which parts of the organisation are affected, which decisions the results support, how long results are relevant, and what influences the need to update.

Source: NIST SP 800-30 Rev. 1 (NIST) — Task 1-2 Identify Scope

Challenge yourself on this topic → Study as cards