- Home
- All questions
- Question 244
CISM study material · question 244 of 1000
CSF 2.0 names four responses for negative risk and four for positive risk. Which two are the positive-risk responses? Choose two.
Show the answer
Answer: A. Realise
C. Enhance
CSF 2.0 names mitigate, transfer, avoid and accept for negative risks, and realise, share, enhance and accept for positive risks. Avoid and transfer belong to the negative set.
Source: NIST CSWP 29 (NIST) — Sec. 5 Improving Cybersecurity Risk Communication