CISSP-ISSEP: Information Systems Security Engineering Professional

Question

Which of the following NIST documents explains that minimizing negative impacts on an organization and establishing a sound basis for decision-making are the fundamental reasons organizations implement a risk management process for their IT systems?

Explanation

NIST SP 800-30 identifies minimizing negative organizational impacts and providing a sound basis for decision-making as the fundamental reasons for implementing a risk management process for IT systems.

Learn more

NIST SP 800-30: Risk Management Guide for Information Technology Systems

CISSP-ISSEP: Information Systems Security Engineering Professional

AstroTutor

Notes

Readiness

QuestionQ86

Community Discussion