116 ◾ The Security Risk Assessment Handbook
© 2011 by Taylor & Francis Group, LLC
◾ Multistage Sampling—is sampling technique combines cluster sampling
and simple sampling. Cluster sampling is used to determine the clusters of
sample units, and simple sampling is used to determine sample units within
the cluster. e Gallup organization uses multistage sampling in the typical
Gallup poll.
5.1.3 Use of Sampling in Security Testing
Sampling can be an excellent technique for gathering representative security test
data about a large number of network components. If the sample is selected cor-
rectly, then testing a small sample of the population can provide the security tester
with the information regarding the network that is required for the ...