Study. uk . com
  1. Home
  2. All questions
  3. Question 115

CISM study material · question 115 of 1000

A manager must explain what risk framing produces. What is its principal output under SP 800-39?

  1. The organisation's risk register
  2. The system security plan for each system
  3. The risk management strategy, addressing how the organisation will assess, respond to and monitor risk
  4. The annual security assessment report
Show the answer

Answer: C. The risk management strategy, addressing how the organisation will assess, respond to and monitor risk

SP 800-39 states risk framing establishes context and a common perspective on managing risk, and produces as its principal output a risk management strategy addressing how the organisation intends to assess, respond to and monitor risk.

Source: NIST SP 800-39 (NIST) — Sec. 3.1 Framing Risk

Challenge yourself on this topic → Study as cards