Exam CCSP All QuestionsBrowse all questions from this exam
Question 45

Which of the following is not a risk management framework?

    Correct Answer: B

    Hex GBL is not a risk management framework but a fictional computer from Terry Pratchett's Discworld series. The other options—COBIT, ISO 31000:2009, and NIST SP 800-37—are all recognized frameworks related to risk management.

Discussion
akg001Option: B

B. Hex GBL

TheFivePipsOption: B

A. COBIT: COBIT (Control Objectives for Information and Related Technologies) is a framework created by ISACA for IT management and governance. It provides a comprehensive framework that assists enterprises in achieving their objectives for the governance and management of enterprise IT. It includes aspects of risk management. B. Hex is an elaborate, Heath Robinson/Rube Goldberg-esque, magic-powered computer housed at Unseen University (UU) in the city of Ankh-Morpork. The main structure works through the movements of large numbers of ants through the complex pipes and tubing which make up the main quantity of Hex's infrastructure. Hex is a computer unlike any other the Disc has ever seen (which is not particularly hard since all other 'computers' on the Disc consist of druidic stone circles). Hex runs and evolves under the watchful eyes of wizard Ponder Stibbons, who becomes the de-facto IT manager at UU because he's the only one who understands what he's talking about. C. ISO 31000:2009: ISO 31000:2009 is an international standard for risk management. D. NIST SP 800-37: NIST Special Publication 800-37 provides guidelines for a risk management framework used by federal agencies in the United States.

TheFivePips

whoever wrote this question fucks

CISSPCCSPMP

duplicate question

VSAN888

doesnt matter