- Home
- All questions
- Question 330
CISM study material · question 330 of 1000
Which two questions does establishing the scope of a risk assessment answer, under SP 800-30? Choose two.
Show the answer
Answer: B. Which decisions the assessment results support
C. How long the assessment results remain relevant
SP 800-30 says establishing scope helps determine which tiers are addressed, which parts of the organisation are affected, which decisions the results support, how long results are relevant, and what influences the need to update.
Source: NIST SP 800-30 Rev. 1 (NIST) — Task 1-2 Identify Scope