Study. uk . com
  1. Home
  2. All questions
  3. Question 126

CISM study material · question 126 of 1000

An organisation wants to be able to roll up risk assessment results from many business areas into an organisation-wide view. What does SP 800-39 say makes this possible?

  1. Establishing common starting points for identifying threat sources at the top tier
  2. Requiring every business area to use identical tooling
  3. Restricting assessments to a single business area at a time
  4. Converting all assessment results into monetary values
Show the answer

Answer: A. Establishing common starting points for identifying threat sources at the top tier

SP 800-39 makes shared Tier 1 starting points for threat source identification the mechanism that lets Tier 2 results be aggregated and consolidated into one organisation-wide picture of risk.

Source: NIST SP 800-39 (NIST) — Task 1-1 Threat Sources

Challenge yourself on this topic → Study as cards