Study. uk . com
  1. Home
  2. All questions
  3. Question 119

CISM study material · question 119 of 1000

Which two organisational realities does SP 800-39 say shape how an organisation frames risk? Choose two.

  1. The number of systems in its inventory
  2. Its financial posture
  3. Its culture and the trust relationships it has established
  4. The version of the framework it has adopted
Show the answer

Answer: B. Its financial posture
C. Its culture and the trust relationships it has established

SP 800-39 states risk framing is informed by the organisational governance structure, financial posture, legal and regulatory environment, investment strategy, culture, and the trust relationships established within and among organisations.

Source: NIST SP 800-39 (NIST) — Step 1 Inputs and Preconditions

Challenge yourself on this topic → Study as cards