Which of the following is not a risk management framework?

The correct answer is B. Hex GBL. COBIT (Control Objectives for Information and Related Technologies), ISO 31000:2009, and NIST SP 800-37 are all well-established, real-world risk management frameworks. 'Hex GBL' does not exist as a recognized framework - it is a fabricated option designed to test whether…

Submitted by ashley.k· Apr 18, 2026Legal, Risk and Compliance

Question

Options

ACOBIT
BHex GBL
CISO 31000:2009
DNIST SP 800-37

How the community answered

(34 responses)

B
91% (31)
C
6% (2)
D
3% (1)

Explanation

COBIT (Control Objectives for Information and Related Technologies), ISO 31000:2009, and NIST SP 800-37 are all well-established, real-world risk management frameworks. 'Hex GBL' does not exist as a recognized framework - it is a fabricated option designed to test whether candidates can distinguish legitimate frameworks from fictional ones.

Topics

#Risk Management Frameworks#COBIT#ISO 31000#NIST RMF

Community Discussion

No community discussion yet for this question.

Full CCSP Practice