Try our Free Demo Practice Tests for Comprehensive CGRC Exam Preparation

Which of the following is NOT typically included in the system registration process in the NIST RMF?

Which of the following roles is responsible for implementing security controls in an information system in accordance with the NIST RMF?

An organization has implemented network segmentation as a security control to prevent unauthorized access to sensitive data. However, the organization has recently experienced a data breach in which an attacker was able to move laterally between different segments of the network. Which of the following is the most likely reason for the failure of this control?

Your organization is preparing to authorize a new information system. As part of the Prepare phase of the NIST SP 800-37 Risk Management Framework, your team is working to identify the system's stakeholders and their roles. Which of the following stakeholders would be responsible for ensuring that the system's security controls are properly implemented and maintained?