The INFORMED RISK Implementation Level must comply with the following in the risk management process:

The INFORMED RISK Implementation Level must comply with the following in the risk management process:
A . The risk management practices of the organization are formally approved and expressed as policies.
B. Risk management practices are approved by management but cannot be established as organization-wide policies.
C. None of the above.
D. The organization adapts its Cybersecurity practices based on lessons learned and predictive
indicators.

View Answer

Answer: B