In the NIST 800-39 framework, the risk frame
A) Addresses how organizations respond to risks
B) Identifies and aggregates the risks facing the organization
C) Describes the environment in which risk-based decisions are made
D) Evaluates the effectiveness of the organization's risk-management plan

Question

Quizplus · Accepted Answer

The risk frame in the NIST 800-39 framework describes the environment in which risk-based decisions are made, setting the context for how risk is assessed, responded to, and monitored within the organization.

In the NIST 800-39 Framework, the Risk Frame