Before running its first formal risk assessment, an organisation documents its assumptions, constraints, priorities and tolerance. Which activity is this?

Question

Answer 1

Show the answer

Answer: A. Risk framing

Framing produces the risk management strategy that later assessments are run against.

Source: NIST SP 800-30 Rev. 1 (NIST) — SP 800-30 Rev. 1 § 2.3 Risk Framing