Which of the following goals represents a modern shift in risk management according to National Institute of Standards and Technology (NIST)?

NIST's modern risk management philosophy, particularly reflected in frameworks like the NIST Risk Management Framework (RMF) and NIST SP 800-37, acknowledges that operating environments are no longer static - they continuously evolve with new technologies, threat actors, and attack vectors. This shift moves away from point-in-time assessments toward continuous monitoring and adaptive security strategies that respond to emerging threats in real time.

Securing IT systems that store, process, or transmit data represents a traditional, system-centric security objective aligned with older frameworks like FISMA's original intent, not the modern adaptive risk management shift NIST advocates.

Enabling management to make risk-based decisions to justify security expenditure is a longstanding goal of risk management and business case development, not a distinguishing characteristic of NIST's modern shift toward dynamic threat environments.

Providing an improved mission accomplishment approach is a general organizational benefit of risk management broadly, but it does not specifically capture NIST's modern emphasis on adapting to evolving and emerging threat landscapes.