What is the SECOND step to creating a risk management methodology according to the National Institute of Standards and Technology (NIST) SP 800-30 standard?

What is the SECOND step to creating a risk management methodology according to the National Institute of Standards and Technology (NIST) SP 800-30 standard?
A . Determine appetite
B . Evaluate risk avoidance criteria
C . Perform a risk assessment
D . Mitigate risk

View Answer

Answer: D