thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Advanced

Risk Framing

Establishing the context, assumptions, constraints, tolerances, and priorities for risk decisions.

Definition

In NIST SP 800-39, risk framing is the first component of risk management and produces a risk management strategy. It defines how the organization will assess, respond to, and monitor risk. Clear framing ensures consistent decisions across tiers.

Example

Leadership documents its assumptions about threat actors and its tolerance for mission downtime.

Exam tip

Framing comes before assessing in the NIST risk management process.

Related terms