PECB Exam ISO-IEC-27005-Risk-Manager Topic 2 Question 9 Discussion

Actual exam question for PECB's PECB Certified ISO/IEC 27005 Risk Manager exam

Question #: 9
Topic #: 2

[All PECB Certified ISO/IEC 27005 Risk Manager Questions]

Based on NIST Risk Management Framework, what is the last step of a risk management process?

AMonitoring security controls

BAccessing security controls

CCommunicating findings and recommendations

Show Suggested Answer

Suggested Answer: A

Based on the NIST Risk Management Framework (RMF), the last step of the risk management process is 'Monitoring Security Controls.' This step involves continuously tracking the effectiveness of the implemented security controls, ensuring they remain effective against identified risks, and adapting them to any changes in the threat landscape. Option A correctly identifies the final step.

by Jaime at Sep 17, 2024, 01:43 PM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-27005-Risk-Manager Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Janine

15 days ago

Hey, this is a piece of cake! Of course, the answer is C. Communicating the results is the cherry on top of the risk management sundae. Gotta spread the word, you know?

upvoted 0 times

Jerry

3 days ago

User 1: I agree, communicating findings and recommendations is key.

upvoted 0 times

...

Bettina

18 days ago

But monitoring security controls is crucial to ensure ongoing effectiveness.

upvoted 0 times

...

Sherita

20 days ago

This is a tough one, but I'm leaning towards C. Communicating the findings is key to the whole process, right? Gotta let everyone know what's going on, good or bad.

upvoted 0 times

...

Keith

24 days ago

I'm going with B. Accessing the security controls is crucial to evaluating the effectiveness of the risk management process. Gotta make sure those controls are up to snuff!

upvoted 0 times

Shala

4 days ago

Let's review the NIST framework to confirm the correct last step together.

upvoted 0 times

...

Chaya

6 days ago

I see your point, but I still think B is the last step. Accessing security controls is essential for evaluation.

upvoted 0 times

...

Herman

8 days ago

I disagree, I believe C is the final step. Communicating findings and recommendations is key for improvement.

upvoted 0 times

...

Roselle

13 days ago

I think A is the last step. Monitoring security controls is important to ensure ongoing protection.

upvoted 0 times

...

Jeanice

28 days ago

I disagree, I believe it's communicating findings and recommendations.

upvoted 0 times

...

Raina

1 months ago

Hmm, I'm not sure. Could it be A? Monitoring the security controls seems like a pretty important final step to ensure the risk management plan is working.

upvoted 0 times

Alishia

9 hours ago

User 3: I'm not so sure, I think A) Monitoring security controls is the last step to ensure everything is running smoothly.

upvoted 0 times

...

Christiane

5 days ago

User 2: I agree, that does sound like a crucial final step in the risk management process.

upvoted 0 times

...

Cheryl

15 days ago

User 1: I think it's C) Communicating findings and recommendations.

upvoted 0 times

...

Samuel

1 months ago

I think the answer is C. Communicating findings and recommendations is the last step in the NIST Risk Management Framework process. It's all about reporting the results to stakeholders, right?

upvoted 0 times