Study. uk . com
  1. Home
  2. All questions
  3. Question 684

CISM study material · question 684 of 1000

Which two limitations does NIST attach to qualitative assessment, despite its ease of use? Choose two.

  1. It cannot be applied to the intangible aspects of risk at all, such as reputational harm
  2. Its results can be subjective
  3. It requires more data than quantitative assessment
  4. It depends on everyone sharing an equal understanding of the scale used
Show the answer

Answer: B. Its results can be subjective
D. It depends on everyone sharing an equal understanding of the scale used

SP 800-55v1 grants that simple categorised judgements are common and easy to make, then notes two costs: the results can be subjective, and everyone has to read the scale the same way.

Source: NIST SP 800-55 Vol. 1 (NIST) — Sec. 2.2 Types of Assessment

Challenge yourself on this topic → Study as cards