Study. uk . com
  1. Home
  2. All questions
  3. Question 113

CISM study material · question 113 of 1000

Before choosing among risk responses, a manager lists the constraints already fixed by framing. Which two does SP 800-39 name? Choose two.

  1. Constraints arising from the existing architecture and previous investments
  2. The time horizon for the risk
  3. The disciplinary sanctions available for non-compliance with the response once it is chosen
  4. The number of vendors bidding for the work
Show the answer

Answer: A. Constraints arising from the existing architecture and previous investments
B. The time horizon for the risk

SP 800-39 lists preconditions from framing including constraints based on architecture and previous investments, organisational preferences and tolerances, the expected effectiveness of mitigation, and the time horizon for the risk.

Source: NIST SP 800-39 (NIST) — Sec. 3.3 Inputs and Preconditions

Challenge yourself on this topic → Study as cards