Which of the following RMF phases is known as risk analysis?

The correct answer is A. Phase 2. In a structured Risk Management Framework (RMF), the phases are typically numbered starting from 0: Phase 0 (Preparation/Framing), Phase 1 (Risk Identification), Phase 2 (Risk Analysis - qualitative and quantitative assessment of identified risks), Phase 3 (Risk…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Options

APhase 2
BPhase 1
CPhase 0
DPhase 3

How the community answered

(61 responses)

A
87% (53)
B
2% (1)
C
7% (4)
D
5% (3)

Explanation

In a structured Risk Management Framework (RMF), the phases are typically numbered starting from 0: Phase 0 (Preparation/Framing), Phase 1 (Risk Identification), Phase 2 (Risk Analysis - qualitative and quantitative assessment of identified risks), Phase 3 (Risk Response/Treatment), and Phase 4 (Risk Monitoring). Risk Analysis in Phase 2 involves evaluating the likelihood and impact of risks and prioritizing them for response planning. This phase is sometimes also referred to as 'Risk Assessment' in certain frameworks like NIST SP 800-39.

Topics

#RMF Phases#Risk Analysis#NIST SP 800-37#Categorize Phase

Community Discussion

No community discussion yet for this question.

Full CAP Practice