Estimating potential loss is an important task of CISSPcerti

Estimating potential loss is an important task of CISSP-certified professionals. In order, which of the following are the steps used to perform a quantitative assessment?

A. Estimate potential losses, perform a vulnerability assessment, and determine annual loss expectancy

B. Estimate potential losses, conduct a threat analysis, and rank losses as high, medium, or low

C. Assemble a team, prepare a matrix of critical systems and services, and rank losses as high, medium, or low

D. Estimate potential losses, conduct a threat analysis, and determine annual loss expectancy

Solution

Answer: Option: D. Estimate potential losses, conduct a threat analysis, and determine annual loss expectancy