Study. uk . com
  1. Home
  2. All questions
  3. Question 341

CISM study material · question 341 of 1000

What does SP 800-30 call the combination of the assessment approach and the analysis approach?

  1. The risk model
  2. The analytic approach for the risk assessment
  3. The assessment methodology, as recorded in the risk strategy
  4. The risk frame
Show the answer

Answer: B. The analytic approach for the risk assessment

SP 800-30 states that together, the assessment approach and the analysis approach form the analytic approach for the risk assessment.

Source: NIST SP 800-30 Rev. 1 (NIST) — Task 1-3 Identify Assumptions and Constraints

Challenge yourself on this topic → Study as cards