CYSA 8 Frameworks and Assessments OS
Exam Questions and Answers with Verified
Solutions | Latest Updated 2026
ERM (Enterprise Risk The comprehensive process of evaluating,
Management) measuring, and mitigating the many risks
that
pervade an organization.
Frame Establish a strategic risk management
framework
that is supported by decision makers at the
top tier
of the organization
Assess Identify and prioritize business process
and
workflows
Respond Mitigate each risk factor through the
deployment
of security controls
Monitor Evaluate the effectiveness of risk response
measures and identify changes that could
affect
risk management process
, Business Continuity Loss A loss associated with no longer being
able to
fulfill contracts and orders due to the
breakdown
of critical systems (server going down)
Legal Costs A loss created by organizational liability
due to
prosecution (criminal law) or damages
(civil law)
Reputational Harm A loss created by negative publicity and
the
consequential loss of market position or
consumer
trust
System Assessments The systematic identification of critical
systems by
compiling an inventory of the business
processes
MEF (Mission Essential Function) Business activity that is too critical to be
deferred
for anything more than a few hours, if at
all.
Exam Questions and Answers with Verified
Solutions | Latest Updated 2026
ERM (Enterprise Risk The comprehensive process of evaluating,
Management) measuring, and mitigating the many risks
that
pervade an organization.
Frame Establish a strategic risk management
framework
that is supported by decision makers at the
top tier
of the organization
Assess Identify and prioritize business process
and
workflows
Respond Mitigate each risk factor through the
deployment
of security controls
Monitor Evaluate the effectiveness of risk response
measures and identify changes that could
affect
risk management process
, Business Continuity Loss A loss associated with no longer being
able to
fulfill contracts and orders due to the
breakdown
of critical systems (server going down)
Legal Costs A loss created by organizational liability
due to
prosecution (criminal law) or damages
(civil law)
Reputational Harm A loss created by negative publicity and
the
consequential loss of market position or
consumer
trust
System Assessments The systematic identification of critical
systems by
compiling an inventory of the business
processes
MEF (Mission Essential Function) Business activity that is too critical to be
deferred
for anything more than a few hours, if at
all.
