Study. uk . com
  1. Home
  2. All questions
  3. Question 133

CISM study material · question 133 of 1000

A manager must justify the effort of keeping risk assessments current rather than repeating them from scratch each year. Which two benefits does SP 800-39 name? Choose two.

  1. It removes the need to keep a risk register
  2. It reduces future assessment costs
  3. It allows the organisation to lower its control baseline across the estate
  4. It enables leaders to perform near real-time risk management
Show the answer

Answer: D. It enables leaders to perform near real-time risk management
B. It reduces future assessment costs

SP 800-39 says keeping assessments up to date provides timely relevant information enabling near real-time risk management, reduces future assessment costs, and supports ongoing risk monitoring efforts.

Source: NIST SP 800-39 (NIST) — Sec. 3.2 Assessing Risk

Challenge yourself on this topic → Study as cards