Questions & Discussions
How does Risk treatment planning support the objective “documents whether identified risk will be mitigated, transferred, avoided, or accepted”?SecurityTalent knowledge answer. Members may add responsible, source-based context; do not post secrets, personal data, exam dumps or recalled live exam questions.
Accepted Answer
Risk treatment planning is a cybersecurity control or practice. It supports this objective: documents whether identified risk will be mitigated, transferred, avoided, or accepted. The implementation should still be validated against the organization's risk, architecture, legal obligations and operating constraints, then adapted rather than copied unchanged between environments.NIST Cybersecurity Framework 2.0: https://www.nist.gov/cyberframework
Accepted Answer
Risk treatment planning is a cybersecurity control or practice. It supports this objective: documents whether identified risk will be mitigated, transferred, avoided, or accepted. The implementation should still be validated against the organization's risk, architecture, legal obligations and operating constraints, then adapted rather than copied unchanged between environments.NIST Cybersecurity Framework 2.0: https://www.nist.gov/cyberframework
There are no replies made for this post yet.