Domain 2 Risk Treatment: Risk Response Options - Risk Frameworks

These flashcards cover key terms and concepts related to risk management frameworks as discussed in the lecture.

Risk Frameworks

Structured tools that compile best practices to aid in establishing and managing risks in organizations.

NIST 800-37

A risk management framework that provides a structured process for integrating security and risk management activities into the system development life cycle.

Categorization

The step in the risk management framework where risks associated with a given system are identified.

Authorization Decision

The process by which the owner of a system determines if the system can go into production based on risk assessments.

Insider Threat

A risk arising from individuals within the organization who may exploit their access to harm the organization.

GDPR

The General Data Protection Regulation, a comprehensive privacy law in the EU that imposes strict rules on data protection.

Continuous Monitoring

An ongoing process to ensure that risk controls are updated and maintained as per changes in the risk environment.

ISO 27001

An international standard for information security management systems (ISMS), focusing on data protection standards.