PECB ISO-IEC-27005-Risk-Manager Exam - Topic 3 Question 3 Discussion

Actual exam question for PECB's ISO-IEC-27005-Risk-Manager exam

Question #: 3
Topic #: 3

[All ISO-IEC-27005-Risk-Manager Questions]

Based on NIST Risk Management Framework, what is the last step of a risk management process?

AMonitoring security controls

BAccessing security controls

CCommunicating findings and recommendations

Show Suggested Answer

Suggested Answer: A

Based on the NIST Risk Management Framework (RMF), the last step of the risk management process is 'Monitoring Security Controls.' This step involves continuously tracking the effectiveness of the implemented security controls, ensuring they remain effective against identified risks, and adapting them to any changes in the threat landscape. Option A correctly identifies the final step.

by Sheron at Sep 08, 2024, 04:13 PM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-27005-Risk-Manager Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jamal

3 months ago

I agree, Monitoring makes the most sense!

upvoted 0 times

...

Alana

3 months ago

Wait, are we sure about that? Seems off to me.

upvoted 0 times

...

Micheline

3 months ago

Yeah, Monitoring is the last step for sure.

upvoted 0 times

...

Bo

4 months ago

I thought it was Communicating findings and recommendations.

upvoted 0 times

...

Jolanda

4 months ago

It's definitely Monitoring security controls!

upvoted 0 times

...

Thea

4 months ago

I’m leaning towards monitoring security controls as the final step, but I could be mixing it up with another framework.

upvoted 0 times

...

Earlean

4 months ago

I feel like accessing security controls might be the last step, but it seems more like an earlier phase to me.

upvoted 0 times

...

Miriam

4 months ago

I remember practicing a question that mentioned communicating findings, but I can't recall if that was the last step or just part of the process.

upvoted 0 times

...

Susana

5 months ago

I think the last step is about monitoring security controls, but I’m not entirely sure.

upvoted 0 times

...

Justine

5 months ago

Monitoring security controls makes the most sense to me based on what I've learned about the NIST Risk Management Framework. I'll select option A.

upvoted 0 times

...

Kayleigh

5 months ago

Accessing security controls doesn't seem quite right. I think the last step is more about reviewing and reporting on the process. I'll try option C.

upvoted 0 times

...

Wayne

5 months ago

Communicating findings and recommendations sounds like the logical final step in the risk management process. I'll go with option C.

upvoted 0 times

...

Ailene

5 months ago

Hmm, I'm a bit unsure about this one. I'll have to think it through carefully before selecting an answer.

upvoted 0 times

...

Rodney

5 months ago

I'm pretty sure the last step is monitoring security controls, so I'll go with option A.

upvoted 0 times

...

Leslie

5 months ago

I'm a bit confused by the wording of this question. I'll have to re-read it a few times to make sure I understand what they're asking.

upvoted 0 times

...

Johnna

1 year ago

Hmm, that makes sense too. Communicating findings is important for improving security measures.

upvoted 0 times

...

Lizbeth

1 year ago

Monitoring security controls? Psh, that's so last year. The NIST framework is all about keeping everyone on their toes. The real last step is Accessing security controls - it's the hacker's delight!

upvoted 0 times

Malissa

1 year ago

I'm pretty sure it's Monitoring security controls.

upvoted 0 times

...

Johana

1 year ago

No way, it's actually Communicating findings and recommendations.

upvoted 0 times

...

Rene

1 year ago

I think the last step is Accessing security controls.

upvoted 0 times

...

Lorrine

1 year ago

Actually, I believe the last step is communicating findings and recommendations.

upvoted 0 times

...

Tamesha

1 year ago

I agree with Johnna, monitoring security controls is crucial for risk management.

upvoted 0 times

...

Vallie

1 year ago

Hmm, I'm going to have to go with Communicating findings and recommendations. After all, what's the point of all that risk management if you don't share the juicy details with everyone?

upvoted 0 times

...

Chantell

1 year ago

Oh, come on, guys. Everybody knows the last step is Accessing security controls. It's like the grand finale of the NIST party!

upvoted 0 times

...

Johnna

1 year ago

I think the last step is monitoring security controls.

upvoted 0 times

...

Ronnie

1 year ago

Ha! As if the NIST framework would end with something as boring as Monitoring security controls. Clearly, the last step is Accessing security controls - that's where the real fun begins!

upvoted 0 times