Certified Cloud Security Professional (CCSP) — Question 172

Which of the following is not a risk management framework?

Answer options

• A. COBIT
• B. Hex GBL
• C. ISO 31000:2009
• D. NIST SP 800-37

Correct answer: B

Explanation

Hex GBL is not a recognized risk management framework, unlike COBIT, ISO 31000:2009, and NIST SP 800-37, which are established frameworks that guide organizations in managing risks effectively.