Which two uses does the Community Profile identify for a standardised risk calculation method during incident response? Choose two.

Answer: C. Setting criteria and informing decisions on when to escalate or elevate response activities
A. Comparing an incident's estimated impact against its actual impact

SP 800-61r3 notes a standardised method for calculating cybersecurity risks can aid in prioritising response and recovery and in comparing estimated with actual impacts, and can establish criteria and inform decisions on when to escalate or elevate.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 2 GV.RM-06