Absolute Free CGRC Exam Practice for Comprehensive Preparation 

An organization has implemented network segmentation as a security control to prevent unauthorized access to sensitive data. However, the organization has recently experienced a data breach in which an attacker was able to move laterally between different segments of the network. Which of the following is the most likely reason for the failure of this control?

Security controls are assessed for a number of reasons. Which of the following are reasons for assessing security controls? Select all that apply.

Which of the following is NOT typically included in the system registration process in the NIST RMF?

In the prepare step of the NIST RMF, which of the following should be established to ensure an effective risk management process?