Study. uk . com
  1. Home
  2. All questions
  3. Question 225

CISM study material · question 225 of 1000

Which sequence correctly names the four components of the SP 800-39 risk management process?

  1. Plan, do, check, act
  2. Identify, protect, detect, respond and recover
  3. Frame, assess, respond, monitor
  4. Categorise, select, implement and authorise
Show the answer

Answer: C. Frame, assess, respond, monitor

SP 800-39 breaks risk management into framing risk, assessing risk, responding to risk and monitoring risk, with framing first because it establishes the context the others work inside.

Source: NIST SP 800-39 (NIST) — Sec. 2.1 Components of Risk Management

Challenge yourself on this topic → Study as cards