Study. uk . com
  1. Home
  2. All questions
  3. Question 169

CISM study material · question 169 of 1000

What benefit does SP 800-39 attribute to embedding the organisation's risk management strategy within its enterprise architecture?

  1. Executives can make better informed trade-offs between improving the mission and managing the risks they must carry
  2. The organisation can lower its control baseline across the whole estate, since the architecture already carries the risk decisions
  3. Systems no longer require individual authorisation
  4. Risk assessments become unnecessary at the system level, because the architecture has already determined what each system may carry
Show the answer

Answer: A. Executives can make better informed trade-offs between improving the mission and managing the risks they must carry

SP 800-39 states that incorporating the risk management strategy into enterprise architecture gives senior leaders the opportunity to make more informed risk-based decisions, trading off improving missions against managing the risks they face.

Source: NIST SP 800-39 (NIST) — Sec. 2.4 Tier Two — Mission/Business Process View

Challenge yourself on this topic → Study as cards