ExpertHard1 markMultiple Choice
CPA · Question 67 · Area II: Security
Which NIST framework is specifically designed to help organizations manage privacy risks?
Which NIST framework is specifically designed to help organizations manage privacy risks?
Answer options:
A.
NIST CSF
B.
NIST SP 800-53
C.
NIST Privacy Framework
D.
NIST RMF
How to approach this question
The name is in the title.
Full Answer
C.NIST Privacy Framework✓ Correct
NIST Privacy Framework
The NIST Privacy Framework is a tool for improving privacy through enterprise risk management, modeled after the CSF but focused on privacy.
Common mistakes
Assuming NIST CSF covers everything (it focuses on security, though they overlap).
Practice the full CPA ISC Practice Exam 4
82 questions · hints · full answers · grading
More questions from this exam
Q01A CPA is advising a client who is migrating their legacy on-premise ERP system to a cloud environ...HardQ02An auditor is reviewing the Service Level Agreement (SLA) for a client using a public cloud provi...HardQ03A company uses an Infrastructure as a Service (IaaS) model. During an IT audit, the auditor disco...HardQ04An organization is implementing the COSO Enterprise Risk Management (ERM) framework to govern its...HardQ05During a walkthrough of an order-to-cash process, the auditor observes that the sales manager can...Hard