NISTNIST CSFProfiles RiskEASYFree question
What is risk tolerance in cybersecurity?
- A.The level of risk an organization is willing to accept in pursuit of its business objectives
- B.The annual amount of money an organization expects to lose from security incidents in a typical year
- C.The number of controls an organization must implement to meet its regulatory obligations to the supervisor
- D.The length of time an organization takes to restore its services after a major disruption in operations
Why A is correct
Risk tolerance defines the level of risk an organization is willing to accept while pursuing its business objectives, guiding decisions about which risks to treat and which to accept.
Know someone studying for NIST CSF? Send them this one.