Study. uk . com
  1. Home
  2. All questions
  3. Question 8

CompTIA Security+ study material · question 8 of 611

At which tier of the risk management hierarchy are decisions about the organisation-wide risk management strategy made?

  1. The mission or business process tier
  2. The organisation tier
  3. The information system tier
  4. The control assessment tier
Show the answer

Answer: B. The organisation tier

The three tiers are organisation, mission or business process, and information system. Strategy is set at the top and constrains the tiers below.

Source: NIST SP 800-30 Rev. 1 (NIST) — SP 800-30 Rev. 1 § 2.2 Risk Management Hierarchy

Challenge yourself on this topic → Study as cards