Which of the following control families belongs to the management class of security controls? Response:

The correct answer is D. Risk assessment. The question asks to identify which of the listed control families falls under the "management class" within the NIST framework for categorizing security controls.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Options

AMedia protection
BConfiguration management
CAccess control
DRisk assessment

How the community answered

(58 responses)

A
3% (2)
C
2% (1)
D
95% (55)

Why each option

The question asks to identify which of the listed control families falls under the "management class" within the NIST framework for categorizing security controls.

AMedia protection

“Media protection” (MP) belongs to the Operational class of security controls.

BConfiguration management

“Configuration management” (CM) belongs to the Operational class of security controls.

CAccess control

“Access control” (AC) belongs to the Technical class of security controls.

DRisk assessmentCorrect

In NIST Special Publication 800-53, security controls are categorized into three classes: Management, Operational, and Technical. "Risk Assessment" (RA) is explicitly classified under the Management class, as it involves organizational-level activities related to identifying, analyzing, and mitigating risks.

Concept tested: NIST SP 800-53 Control Classes

Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final

Topics

#Control families#Control classification#Management controls#Risk assessment

Community Discussion

No community discussion yet for this question.

Full CGRC Practice