Integrate Cybersecurity Risk Management into Broader Enterprise Risk Management Programs. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 6)

Questions 26–28

1. 26foundation · easy

   Which framework is specifically designed to help organizations integrate cybersecurity risk into enterprise risk management?

   • ATOGAF
   • BPMBOK
   • CNIST Cybersecurity Framework (CSF) 2.0
   • DITIL
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company is looking for a framework to help integrate cybersecurity risk into its enterprise risk management. The company already uses COSO for enterprise risk management. Which framework is designed to be used with COSO to integrate cybersecurity risk?

   • ATOGAF
   • BITIL
   • CNIST Cybersecurity Framework
   • DCOBIT
   Reveal Solution Discussion Select an answer first
3. 28application · medium

   A CISO needs to communicate a newly identified critical vulnerability to the executive team. The vulnerability could allow remote code execution on internet-facing systems. The executive team is not technical. What is the best way to communicate this risk?

   • ADescribe the potential impact on business operations, customer data, and regulatory compliance.
   • BSend a detailed technical report and ask them to review it before the next meeting.
   • CRecommend immediate patching without explaining the risk.
   • DExplain the technical details of the vulnerability and the exploit code available.
   Reveal Solution Discussion Select an answer first