In the NIST 800-39 framework, risk assessment
A) Addresses how organizations respond to risks
B) Identifies and aggregates the risks facing the organization
C) Describes the environment in which risk-based decisions are made
D) Evaluates the effectiveness of the organization's risk-management plan

Question

Quizplus · Accepted Answer

Risk assessment in the NIST 800-39 framework involves identifying and aggregating risks faced by the organization. It doesn't address how organizations respond to risks (that is the role of the risk response step), describe the environment in which risk-based decisions are made (that is the role of risk framing), or evaluate the effectiveness of the organization's risk-management plan (that is the role of risk monitoring and communication).

In the NIST 800-39 Framework, Risk Assessment