There's definitely a subset of questions about risk management, which includes strategies to define and determine if a risk is to be accepted, ignored, mitigated, or transferred. Insurance is a type of risk-transfer so do expect questions about it on the exam.
There's sufficient coverage of risk management concepts in the official study guide, but you're probably better off also reading the AIO for a plain English explanation.
@JDMurray, there are no detailed references to insurance in the AIO, CBK, or Eric Conrad books. I did see some difficult questions on the CCCure test engine that were asking about the ACV and RCV. This is why I was wondering if I should dedicate more time to this area.
@forestgiant, I feel pretty good about the risk management strategies portion, but I don't know much about insurance, beyond it being related to risk transfer.
The word "insurance" doesn't appear in the CISSP Candidate Information Bulletin. ACV and RCV are important for understanding how to treat a risk, but I don't think it's necessary to relate those terms specificly to insurance (or assurance) for the CISSP.
The word "insurance" doesn't appear in the CISSP Candidate Information Bulletin. ACV and RCV are important for understanding how to treat a risk, but I don't think it's necessary to relate those terms specificly to insurance (or assurance) for the CISSP.
I was going to say the exact same thing. There is nothing on the exam that refers to "insurance".
Comments
Forum Admin at www.techexams.net
--
LinkedIn: www.linkedin.com/in/jamesdmurray
Twitter: www.twitter.com/jdmurray
There's sufficient coverage of risk management concepts in the official study guide, but you're probably better off also reading the AIO for a plain English explanation.
@forestgiant, I feel pretty good about the risk management strategies portion, but I don't know much about insurance, beyond it being related to risk transfer.
Forum Admin at www.techexams.net
--
LinkedIn: www.linkedin.com/in/jamesdmurray
Twitter: www.twitter.com/jdmurray
I was going to say the exact same thing. There is nothing on the exam that refers to "insurance".
Website: www.nxecurity.com