NISTNIST CSFGovern FunctionEASYFree question

What is the purpose of the Risk Management Strategy category (GV.RM) in the Govern function?

A.To establish the organization's priorities, constraints, risk tolerance, and assumptions for managing cybersecurity risk
B.To implement specific technical risk mitigation controls
C.To conduct annual risk assessments
D.To monitor risk indicators in real time

Why A is correct

The Risk Management Strategy category establishes organizational priorities, constraints, risk tolerance statements, and assumptions that guide cybersecurity risk management decisions.

Know someone studying for NIST CSF? Send them this one.

NIST CSF and NIST are trademarks or registered trademarks of their respective owners. CyberCertPrep is an independent exam-preparation resource and is not affiliated with, authorized by, sponsored by, or endorsed by NIST or any other certification body. All study material is independently created; the certification name is used only to identify the exam this resource helps you prepare for.

What is the purpose of the Risk Management Strategy category (GV.RM) in the Govern function?

Where this fits in the NIST CSF exam

One question down. Thousands to go.

What is the purpose of the Risk Management Strategy category (GV.RM) in the Govern function?

Where this fits in the NIST CSF exam

More free Govern Function questions

One question down. Thousands to go.