Study. uk . com
  1. Home
  2. All questions
  3. Question 67

CISM study material · question 67 of 1000

Under IR 8286, which governance responsibility sits with executive leaders in relation to risk?

  1. Chairing the incident response team during major incidents, so that executive authority is present when containment decisions are taken
  2. Establishing clear, actionable risk guidance and expressing expectations on risk appetite and tolerance
  3. Selecting the security controls that will treat each entry in the risk register, and approving the residual risk each selection leaves behind
  4. Performing the risk assessments for each business system
Show the answer

Answer: B. Establishing clear, actionable risk guidance and expressing expectations on risk appetite and tolerance

IR 8286 places among executive governance responsibilities the establishment of clear and actionable risk management guidance based on mission and business objectives, with leaders expressing expectations on risk appetite and tolerance.

Source: NIST IR 8286 (NIST) — Sec. 3.1.2 Risk Management Strategy

Challenge yourself on this topic → Study as cards