MENU
Based on NIST Risk Management Framework, what is the last step of a risk management process?
Suggested Answer: A
Get Premium ISO-IEC-27005-Risk-Manager Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Based on the NIST Risk Management Framework (RMF), the last step of the risk management process is 'Monitoring Security Controls.' This step involves continuously tracking the effectiveness of the implemented security controls, ensuring they remain effective against identified risks, and adapting them to any changes in the threat landscape. Option A correctly identifies the final step.
38 comments · newest first
JA
Jamal
10 months ago
I agree, Monitoring makes the most sense!
AL
Alana
11 months ago
Wait, are we sure about that? Seems off to me.
MI
Micheline
11 months ago
Yeah, Monitoring is the last step for sure.
BO
Bo
11 months ago
I thought it was Communicating findings and recommendations.
JO
Jolanda
11 months ago
It's definitely Monitoring security controls!
TH
Thea
12 months ago
I’m leaning towards monitoring security controls as the final step, but I could be mixing it up with another framework.
EA
Earlean
12 months ago
I feel like accessing security controls might be the last step, but it seems more like an earlier phase to me.
MI
Miriam
12 months ago
I remember practicing a question that mentioned communicating findings, but I can't recall if that was the last step or just part of the process.
SU
Susana
1 year ago
I think the last step is about monitoring security controls, but I’m not entirely sure.
JU
Justine
1 year ago
Monitoring security controls makes the most sense to me based on what I've learned about the NIST Risk Management Framework. I'll select option A.
KA
Kayleigh
1 year ago
Accessing security controls doesn't seem quite right. I think the last step is more about reviewing and reporting on the process. I'll try option C.
WA
Wayne
1 year ago
Communicating findings and recommendations sounds like the logical final step in the risk management process. I'll go with option C.
AI
Ailene
1 year ago
Hmm, I'm a bit unsure about this one. I'll have to think it through carefully before selecting an answer.
RO
Rodney
1 year ago
I'm pretty sure the last step is monitoring security controls, so I'll go with option A.
LE
Leslie
1 year ago
I'm a bit confused by the wording of this question. I'll have to re-read it a few times to make sure I understand what they're asking.
JO
Johnna
2 years ago
Hmm, that makes sense too. Communicating findings is important for improving security measures.
LI
Lizbeth
2 years ago
Monitoring security controls? Psh, that's so last year. The NIST framework is all about keeping everyone on their toes. The real last step is Accessing security controls - it's the hacker's delight!
MA
Malissa
2 years ago
I'm pretty sure it's Monitoring security controls.
JO
Johana
2 years ago
No way, it's actually Communicating findings and recommendations.
RE
Rene
2 years ago
I think the last step is Accessing security controls.
LO
Lorrine
2 years ago
Actually, I believe the last step is communicating findings and recommendations.
TA
Tamesha
2 years ago
I agree with Johnna, monitoring security controls is crucial for risk management.
VA
Vallie
2 years ago
Hmm, I'm going to have to go with Communicating findings and recommendations. After all, what's the point of all that risk management if you don't share the juicy details with everyone?
CH
Chantell
2 years ago
Oh, come on, guys. Everybody knows the last step is Accessing security controls. It's like the grand finale of the NIST party!
JO
Johnna
2 years ago
I think the last step is monitoring security controls.
RO
Ronnie
2 years ago
Ha! As if the NIST framework would end with something as boring as Monitoring security controls. Clearly, the last step is Accessing security controls - that's where the real fun begins!
TO
Tori
2 years ago
Gracia: Hmm, I guess I need to review the framework again.
MA
Maybelle
2 years ago
I agree with Maybelle, that's the final step according to NIST.
GR
Gracia
2 years ago
No way, it's definitely Communicating findings and recommendations.
AU
Audry
2 years ago
I think the last step is Accessing security controls.
JE
Jestine
2 years ago
Hmm, I think it's Communicating findings and recommendations. Gotta make sure everyone is in the loop, right?
JU
Juliana
2 years ago
Yes, it's important to keep everyone informed about the findings and recommendations.
JA
Jamey
2 years ago
I agree, communication is key in risk management.
CO
Corazon
2 years ago
I'm pretty sure the last step is Monitoring security controls. That's the one that's always emphasized in the NIST framework.
CH
Chantell
2 years ago
Yes, that's correct. It's important to continuously monitor security controls to ensure they are effective.
CA
Carolynn
2 years ago
Yes, that's correct. It's important to continuously monitor security controls to ensure they are effective.
AN
Anika
2 years ago
I think you're right, Monitoring security controls is the last step in the NIST framework.
TE
Tequila
2 years ago
I think you're right, Monitoring security controls is the last step in the NIST Risk Management Framework.