Study. uk . com
  1. Home
  2. All questions
  3. Question 231

CISM study material · question 231 of 1000

New legislation obliges the organisation to deploy a specific safeguard immediately. Under SP 800-39, what may happen to the normal sequence of risk components?

  1. The requirement is recorded and actioned in the next annual cycle
  2. Information can pass directly from framing to response, bypassing a fresh assessment, because compliance is required immediately
  3. The organisation must first obtain a formal waiver from the risk executive function before it may act ahead of a completed risk assessment
  4. The sequence is fixed and a new assessment must be completed first
Show the answer

Answer: B. Information can pass directly from framing to response, bypassing a fresh assessment, because compliance is required immediately

SP 800-39 states the flows and execution order of the components may be flexible, giving the example of new legislation communicated directly from risk framing to risk response so compliance activities are carried out immediately.

Source: NIST SP 800-39 (NIST) — Sec. 2.1 Components of Risk Management

Challenge yourself on this topic → Study as cards