Discuss ISC2 ISSEP Exam Topic 3 Question 26

The phase 3 of the Risk Management Framework (RMF) process is known as mitigation planning.

Which of the following processes take place in phase 3? Each correct answer represents a complete

solution. Choose all that apply.

AAgree on a strategy to mitigate risks.

BEvaluate mitigation progress and plan next assessment.

CIdentify threats, vulnerabilities, and controls that will be evaluated.

DDocument and implement a mitigation plan.

Suggested Answer: A, B, D

The phase 3 of Risk Management Framework (RMF) process is known as mitigation planning. The

goal of this phase is to determine which risks will be addressed in the final mitigation strategy by

using the risk statements created in phase 2. The following processes take place in this

phase:

Process 1: Agree on a strategy to mitigate risks.

Process 2: Document and implement mitigation plan.

Process 3: Evaluate mitigation progress and plan next assessment.

Answer option C is incorrect. This process takes place in phase 0.

Get Premium ISSEP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

11 comments · newest first

Willard 11 months ago

Wow, I didn't realize all these steps were in phase 3!

Fairy 12 months ago

Wait, are we sure about A? I thought it was more about execution.

Larue 12 months ago

C seems off to me; that's more about assessment, not mitigation.

Terry 12 months ago

I think B is also important for tracking progress.

Kirk 1 year ago

Definitely A and D! Those are key steps.

Ilene 1 year ago

I keep mixing up the phases, but I don't think C fits here since identifying threats usually happens earlier in the RMF process.

Lizette 1 year ago

I practiced a question similar to this, and I feel like evaluating progress is definitely part of the phase, so B might be a good choice.

Tresa 1 year ago

I'm a bit unsure, but I remember something about agreeing on a strategy being part of the process, so maybe A is correct too?

Lai 1 year ago

I think phase 3 is all about actually putting the mitigation strategies into action, so D seems right to me.

Corazon 1 year ago

I'm a bit confused by the wording of the question. Can someone clarify what "VM-level gradually of Volts" means? I want to make sure I understand the core concept before trying to select the right answer.

Dorthy 1 year ago

This question seems straightforward, but I want to make sure I understand the requirements correctly before selecting my answers.

ISC2 ISSEP Exam - Topic 3 Question 26 Discussion