Study. uk . com
  1. Home
  2. All questions
  3. Question 116

CISM study material · question 116 of 1000

At the organisation tier, senior leaders define the risk frame. Which two aspects of monitoring do they settle there? Choose two.

  1. The individual assigned to each monitoring task
  2. The level of detail at which risk is monitored
  3. The frequency with which risk is monitored
  4. The tooling each system owner must purchase
Show the answer

Answer: B. The level of detail at which risk is monitored
C. The frequency with which risk is monitored

SP 800-39 has Tier 1 leaders settle, within the risk frame, how closely risk is watched, in what form results come back, and how often — decisions taken above the systems being monitored.

Source: NIST SP 800-39 (NIST) — Sec. 3.1 Framing Risk

Challenge yourself on this topic → Study as cards