Study. uk . com
  1. Home
  2. All questions
  3. Question 103

CISSP study material · question 103 of 500

An assessment covers two events: a targeted intrusion by a criminal group, and a transformer failure in the building. The team uses the same estimation basis for both. Why is that wrong under NIST SP 800-30?

  1. Adversarial events must be scored quantitatively and non-adversarial ones qualitatively.
  2. Adversarial likelihood rests on intent, capability and targeting; non-adversarial likelihood rests on historical or empirical evidence.
  3. Adversarial likelihood is assessed at Tier 1 and non-adversarial likelihood at Tier 3.
  4. Non-adversarial events are predisposing conditions and carry no likelihood of their own.
Show the answer

Answer: B. Adversarial likelihood rests on intent, capability and targeting; non-adversarial likelihood rests on historical or empirical evidence.

SP 800-30 bases adversarial likelihood on the adversary's intent, capability and targeting, and non-adversarial likelihood on historical evidence, empirical data or similar factors.

Source: NIST SP 800-30 Rev. 1 (NIST) — SP 800-30 Rev. 1 > 2.3.1 Likelihood

Challenge yourself on this topic → Study as cards