Which of the three-tiered approaches to risk management address risk at an Enterprise-wide perspective? Response:

NIST Special Publication 800-39 outlines a three-tiered risk management approach, with the Organizational tier (Tier 1) focusing on the enterprise-wide view of risk. This tier involves establishing risk management strategy, governance, and overall risk tolerance for the entire organization.

Categorization is a specific process within risk management, used to classify information and systems, not one of the three overarching tiers of the approach.

Authorization is a critical decision point in the Risk Management Framework, signifying acceptance of risk, but it is not one of the three tiers of risk management.

Initiation refers to the beginning of a process or project, not a defined tier within the three-tiered risk management framework.