Study. uk . com
  1. Home
  2. All questions
  3. Question 390

CISSP study material · question 390 of 500

Which three benefits does SP 800-115 attribute to a documented, repeatable assessment methodology? Choose three.

  1. A guarantee that every vulnerability present will be found.
  2. Help in living within the resources available for assessment.
  3. A faster handover when assessment staff change.
  4. Consistency and structure, which minimises testing risk.
Show the answer

Answer: B. Help in living within the resources available for assessment.
D. Consistency and structure, which minimises testing risk.
C. A faster handover when assessment staff change.

A repeatable documented methodology provides consistency and structure that minimises testing risks, expedites the transition of new assessment staff, and addresses resource constraints.

Source: NIST SP 800-115 (NIST) — SP 800-115 > 2.1 Information Security Assessment Methodology

Challenge yourself on this topic → Study as cards