Define the Organizational Context and Risk Management Strategy. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 6)

Questions 26–27

1. 26foundation · easy

   Which of the following is an example of an external factor that should be considered when defining the organizational context?

   • AThe organization's internal IT architecture
   • BThe organization's risk tolerance levels
   • CThe skills and expertise of the security team
   • DThe threat landscape and regulatory requirements
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which activity best incorporates supply chain risk management into the risk management strategy?

   • AIgnoring vendor risks because they are outside the organization's control
   • BEliminating all third-party vendors to avoid risk
   • CAssessing the cybersecurity posture of third-party vendors before engaging them
   • DTransferring all supply chain risks to the organization's customers
   Reveal Solution Discussion Select an answer first