Study. uk . com
  1. Home
  2. All questions
  3. Question 335

CISM study material · question 335 of 1000

Which two benefits does SP 800-30 attribute to making assumptions and constraints explicit? Choose two.

  1. Increased opportunity for reciprocity among organisations
  2. Reduction in the number of risks that must be assessed
  3. Elimination of uncertainty from the assessment
  4. Increased reproducibility and repeatability of assessment results
Show the answer

Answer: D. Increased reproducibility and repeatability of assessment results
A. Increased opportunity for reciprocity among organisations

SP 800-30 credits explicit assumptions with three gains: the chosen risk model is clearer, results can be reproduced and repeated, and other organisations become more willing to accept them.

Source: NIST SP 800-30 Rev. 1 (NIST) — Task 1-3 Identify Assumptions and Constraints

Challenge yourself on this topic → Study as cards