For a non-adversarial threat event, which two attributes of the event itself does SP 800-30 say the likelihood of adverse impact takes into account? Choose two.

Question

Answer 1

Show the answer

Answer: B. Its anticipated severity
C. Its anticipated duration

SP 800-30 turns to the event's own description for non-adversarial cases — how severe it is expected to be and how long it is expected to last — since there is no adversary to characterise.

Source: NIST SP 800-30 Rev. 1 (NIST) — Task 2-4 Determine Likelihood