PECB Exam ISO-IEC-27005-Risk-Manager Topic 2 Question 9 Discussion

Actual exam question for PECB's ISO-IEC-27005-Risk-Manager exam

Question #: 9
Topic #: 2

[All ISO-IEC-27005-Risk-Manager Questions]

Based on NIST Risk Management Framework, what is the last step of a risk management process?

AMonitoring security controls

BAccessing security controls

CCommunicating findings and recommendations

Show Suggested Answer

Suggested Answer: A

Based on the NIST Risk Management Framework (RMF), the last step of the risk management process is 'Monitoring Security Controls.' This step involves continuously tracking the effectiveness of the implemented security controls, ensuring they remain effective against identified risks, and adapting them to any changes in the threat landscape. Option A correctly identifies the final step.

by Jaime at Sep 17, 2024, 01:43 PM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-27005-Risk-Manager Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Janine

2 months ago

Hey, this is a piece of cake! Of course, the answer is C. Communicating the results is the cherry on top of the risk management sundae. Gotta spread the word, you know?

upvoted 0 times

Elvera

2 months ago

Monitoring security controls is crucial too, but communication is the final step.

upvoted 0 times

...

Earleen

2 months ago

Definitely, it's important to let everyone know about the risks.

upvoted 0 times

...

Jerry

2 months ago

I agree, communicating findings and recommendations is key.

upvoted 0 times

...

Bettina

2 months ago

But monitoring security controls is crucial to ensure ongoing effectiveness.

upvoted 0 times

...

Sherita

2 months ago

This is a tough one, but I'm leaning towards C. Communicating the findings is key to the whole process, right? Gotta let everyone know what's going on, good or bad.

upvoted 0 times

...

Keith

3 months ago

I'm going with B. Accessing the security controls is crucial to evaluating the effectiveness of the risk management process. Gotta make sure those controls are up to snuff!

upvoted 0 times

Shala

2 months ago

Let's review the NIST framework to confirm the correct last step together.

upvoted 0 times

...

Chaya

2 months ago

I see your point, but I still think B is the last step. Accessing security controls is essential for evaluation.

upvoted 0 times

...

Herman

2 months ago

I disagree, I believe C is the final step. Communicating findings and recommendations is key for improvement.

upvoted 0 times

...

Roselle

2 months ago

I think A is the last step. Monitoring security controls is important to ensure ongoing protection.

upvoted 0 times

...

Jeanice

3 months ago

I disagree, I believe it's communicating findings and recommendations.

upvoted 0 times

...

Raina

3 months ago

Hmm, I'm not sure. Could it be A? Monitoring the security controls seems like a pretty important final step to ensure the risk management plan is working.

upvoted 0 times

Alishia

2 months ago

I'm not so sure, I think A) Monitoring security controls is the last step to ensure everything is running smoothly.

upvoted 0 times

...

Christiane

2 months ago

I agree, that does sound like a crucial final step in the risk management process.

upvoted 0 times

...

Cheryl

2 months ago

I think it's C) Communicating findings and recommendations.

upvoted 0 times

...

Samuel

3 months ago

I think the answer is C. Communicating findings and recommendations is the last step in the NIST Risk Management Framework process. It's all about reporting the results to stakeholders, right?

upvoted 0 times