CISSP-ISSEP: Information Systems Security Engineering Professional

By ISC · Question Mode

QuestionQ168

VerifiedRisk Management

Phase 3 of the Risk Management Framework (RMF) process is called mitigation planning. Which of the following processes occur during phase 3? Each correct answer represents a complete solution. Choose all that apply.

Choose three
Explanation

Mitigation planning establishes the selected risk-treatment strategy, documents and carries out specific mitigation actions, and measures progress and success to inform the next risk assessment. Identifying threats, vulnerabilities, and controls occurs during risk identification and assessment before mitigation planning.

Community Discussion

No comments yet. Be the first to start the discussion!