NIST rMF

Question 1

Prepare

Answer 1

Activities necessary to manage risk before a breach.

Look for risks and opportunities to add controls

Question 2

Categorize

Answer 2

Developer risk management processes and tasks

Question 3

Select

Answer 3

Choose, customize, and capture documentation of controls that protect an org

Eg: keep a playbook up to daye

Question 4

Implement

Answer 4

Implement security and privacy plans

Employees needing password resets is an example

Question 5

Assess

Answer 5

Determine if established controls are implemented correctly

Identify weaknesses and see if any changes need to be made

Question 6

Authorize

Answer 6

Being accountable for security and privacy risks

Generate reports
Establish project milestones towards goals

Question 7

Monitor

Answer 7

Be aware of how systems are operating

Know how the current systems are supporting the goals and security posture