Study. uk . com
  1. Home
  2. All questions
  3. Question 249

CISM study material · question 249 of 1000

Which sequence correctly describes the enterprise risk management life cycle used in IR 8286?

  1. Detect, analyse, contain, eradicate, recover
  2. Frame, assess, respond, monitor
  3. Prepare, categorise, select, implement, assess, authorise, monitor
  4. Identify the context, identify the risks, analyse, prioritise, plan and execute responses, monitor and adjust
Show the answer

Answer: D. Identify the context, identify the risks, analyse, prioritise, plan and execute responses, monitor and adjust

IR 8286 uses a six-step life cycle: identify the context, identify the risks, analyse the risks, prioritise the risks, plan and execute risk response strategies, then monitor, evaluate and adjust.

Source: NIST IR 8286 (NIST) — Sec. 2.1 Notional Risk Management Life Cycle

Challenge yourself on this topic → Study as cards