What does RMF stand for?

• Risk Management Framework

• Risk Mitigation Formulation

• Resource Management Facility

• Regulatory Measures Foundation

How many steps are there in the Risk Management Framework?

• 5

• 6

• 7

• 9

What is the first step in the Risk Management Framework?

• Categorization

• Planning/Prepare

• Selection Security Control

• Implementation

What is the purpose of the Risk Management Framework (RMF)?

• To ensure compliance with legal requirements

• To enable an organization to identify, assess, and analyze risk to manage risk within the organization

• To provide financial advice to organizations

• To create a business plan for new projects

Which step in the RMF involves authorizing continued use of security controls?

• Assess

• Authorize

• Implement

• Monitor

What is the final step in the Risk Management Framework as listed in the image?

• Assessment

• Authorize

• Continuous Monitoring

• Planning/Prepare

What is the purpose of Step 1: Prepare in the NIST Risk Management Framework?

• To implement the controls and document how controls are deployed

• To carry out essential activities to help prepare all levels of the organization to manage its security and privacy risks

• To inform organizational risk management processes and tasks by determining the adverse impact with respect to the loss of confidentiality, integrity, and availability of systems

• To continuously monitor security controls and make adjustments to the system

Which of the following is an outcome of Step 2: Categorize in the NIST Risk Management Framework?

• Key risk management roles identified

• Security categorization of the system and information completed

• Common controls identified

• Organization-wide strategy for continuous monitoring developed and implemented

What is the purpose of Step 2: Categorize in the NIST Risk Management Framework?

• To document system characteristics

• To establish a risk management strategy

• To inform organizational risk management processes and tasks by determining the adverse impact with respect to the loss of confidentiality, integrity, and availability of systems

• To identify key risk management roles

Which step in the NIST Risk Management Framework involves reviewing and approving the categorization decision by an authorizing official?

• Step 1: Prepare

• Step 2: Categorize

• Step 3: Select

• Step 4: Implement