Risk Management Frameworks Quiz

Quiz covering Risk and Continuity

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

1. 1

   Which component of the NIST Risk Management Framework (RMF) involves selecting the appropriate security controls for an information system?

2. 2

   In the context of business continuity, what is the primary purpose of a Business Impact Analysis (BIA)?

3. 3

   When applying the ISO/IEC 27001 framework, what is the core objective of the 'Risk Treatment' phase?

4. 4

   A network administrator is evaluating the Recovery Time Objective (RTO) and Recovery Point Objective (RPO) for a database. If the database must be restored to a state no older than 1 hour, which metric is being defined?

5. 5

   An organization is transitioning from a compliance-based security posture to a risk-based posture using the FAIR (Factor Analysis of Information Risk) framework. What is the primary output of a FAIR analysis?