Study. uk . com
  1. Home
  2. All questions
  3. Question 336

CISM study material · question 336 of 1000

Which two constraints on a risk assessment does SP 800-30 identify? Choose two.

  1. The skills and expertise the assessment requires
  2. The number of risks the register may hold
  3. The reporting format required by the regulator
  4. The resources available for the assessment
Show the answer

Answer: D. The resources available for the assessment
A. The skills and expertise the assessment requires

SP 800-30 identifies constraints in key areas including the resources available for the assessment, the skills and expertise required, and operational considerations related to business activities.

Source: NIST SP 800-30 Rev. 1 (NIST) — Task 1-3 Identify Assumptions and Constraints

Challenge yourself on this topic → Study as cards