Study. uk . com
  1. Home
  2. All questions
  3. Question 562

CompTIA Security+ study material · question 562 of 611

Which step was added to the Risk Management Framework in Revision 2, and what does it establish?

  1. Select; it introduced tailoring of baselines
  2. Assess; it separated evidence gathering from authorisation
  3. Monitor; it introduced continuous assessment
  4. Prepare; it puts the organisational and system groundwork before categorisation
Show the answer

Answer: D. Prepare; it puts the organisational and system groundwork before categorisation

Earlier revisions assumed that groundwork; Prepare makes it an explicit step with its own tasks.

Source: NIST SP 800-37 Rev. 2 (NIST) — SP 800-37 Rev. 2 › Executive Summary

Challenge yourself on this topic → Study as cards