Which of the following is the best reason for the use of an automated risk analysis tool?

A.
Much of the data gathered during the review cannot be reused for subsequent analysis.

B.
Automated methodologies require minimal training and knowledge of risk analysis.

C.
Most software tools have user interfaces that are easy to use and do not require any training.

D.
Information gathering would be minimized and expedited due to the amount of information already built into
the tool.

Explanation:
Collecting all the necessary data that needs to be plugged into risk analysis equations and properly interpreting
the results can be overwhelming if done manually. Several automated risk analysis tools on the market can
make this task much less painful and, hopefully, more accurate. The gathered data can be reused, greatly
reducing the time required to perform subsequent analyses.
The objective of these tools is to reduce the manual effort of these tasks, perform calculations quickly, estimate
future expected losses, and determine the effectiveness and benefits of the security countermeasures chosen.
Incorrect Answers:
A: The gathered data can be reused, greatly reducing the time required to perform subsequent analyses.
B: Training and knowledge of risk analysis is still required when using automated risk analysis tools.
C: Training is still required when using automated risk analysis tools even if the user interface is easy to use.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 86