RE: [CISSP-D] Control types?

Kevin - 
Some additional explanation:

Jerry: If you work in a location that has hurricanes rarely, say once every ten 
years, then the ARO would be .001, or .1%.  (Don't forget, ARO is ANNUAL Rate of
Occurrence, so something that happens less often is still calculated, but it is 
less than 1%.)

Kevin: Wouldn't that be .1, or 10%?

Jerry's Response:  Now you?ve got me questioning myself.  This is not my area 
of expertise, but I do believe I had a pretty good understanding of the ISC2?s 
description.

If something happens all year long, it is 100% of the time, or 1.00.

If something happens one tenth of the year (36.5 days), then it happens 10% of 
the time, or .10.

If something happens one hundredth of the year (3.65 days), then that?s 1%, or 
.01.

Less often than that is less than yearly.  It is my understanding that once 
every ten years is .1% or .001., once every five years us .2% (.002), every
other year is .5% (.005) etc.

If my math or theory is wrong, I apologize.  Hopefully someone else can provide 
input/confirmation.

Jerry






------------------------ Yahoo! Groups Sponsor --------------------~--> 
$9.95 domain names from Yahoo!. Register anything.
http://us.click.yahoo.com/J8kdrA/y20IAA/yQLSAA/kgFolB/TM
--------------------------------------------------------------------~-> 

 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/CISSP-Discuss/

<*> To unsubscribe from this group, send an email to:
    CISSP-Discuss-unsubscribe@yahoogroups.com

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/