Study. uk . com
  1. Home
  2. All questions
  3. Question 588

CISM study material · question 588 of 1000

How many steps does the Risk Management Framework have, and what distinguishes the first?

  1. Five, of which the first is selection of the control baseline that the system will be built to and operated against
  2. Seven, of which the first is a preparatory step ensuring the organisation is ready to execute the process
  3. Six, of which the first is the categorisation of the system itself and of all of the information that it processes, stores or transmits
  4. Four, of which the first is framing the risk that the organisation is prepared to carry in pursuit of its own mission
Show the answer

Answer: B. Seven, of which the first is a preparatory step ensuring the organisation is ready to execute the process

SP 800-37 counts seven RMF steps: a preparatory one that gets the organisation ready, then categorize, select, implement, assess, authorize and monitor.

Source: NIST SP 800-37 Rev. 2 (NIST) — Sec. 2.2 RMF Steps and Structure

Challenge yourself on this topic → Study as cards