New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSEP Exam - Topic 3 Question 26 Discussion

Actual exam question for ISC2's ISSEP exam
Question #: 26
Topic #: 3
[All ISSEP Questions]

The phase 3 of the Risk Management Framework (RMF) process is known as mitigation planning.

Which of the following processes take place in phase 3? Each correct answer represents a complete

solution. Choose all that apply.

Show Suggested Answer Hide Answer
Suggested Answer: A, B, D

The phase 3 of Risk Management Framework (RMF) process is known as mitigation planning. The

goal of this phase is to determine which risks will be addressed in the final mitigation strategy by

using the risk statements created in phase 2. The following processes take place in this

phase:

Process 1: Agree on a strategy to mitigate risks.

Process 2: Document and implement mitigation plan.

Process 3: Evaluate mitigation progress and plan next assessment.

Answer option C is incorrect. This process takes place in phase 0.


Contribute your Thoughts:

0/2000 characters
Willard
4 months ago
Wow, I didn't realize all these steps were in phase 3!
upvoted 0 times
...
Fairy
4 months ago
Wait, are we sure about A? I thought it was more about execution.
upvoted 0 times
...
Larue
4 months ago
C seems off to me; that's more about assessment, not mitigation.
upvoted 0 times
...
Terry
4 months ago
I think B is also important for tracking progress.
upvoted 0 times
...
Kirk
5 months ago
Definitely A and D! Those are key steps.
upvoted 0 times
...
Ilene
5 months ago
I keep mixing up the phases, but I don't think C fits here since identifying threats usually happens earlier in the RMF process.
upvoted 0 times
...
Lizette
5 months ago
I practiced a question similar to this, and I feel like evaluating progress is definitely part of the phase, so B might be a good choice.
upvoted 0 times
...
Tresa
5 months ago
I'm a bit unsure, but I remember something about agreeing on a strategy being part of the process, so maybe A is correct too?
upvoted 0 times
...
Lai
5 months ago
I think phase 3 is all about actually putting the mitigation strategies into action, so D seems right to me.
upvoted 0 times
...
Corazon
5 months ago
I'm a bit confused by the wording of the question. Can someone clarify what "VM-level gradually of Volts" means? I want to make sure I understand the core concept before trying to select the right answer.
upvoted 0 times
...
Dorthy
5 months ago
This question seems straightforward, but I want to make sure I understand the requirements correctly before selecting my answers.
upvoted 0 times
...

Save Cancel