How should a CIS-RC implementer describe Advanced Risk relative to core risk capabilities?
Select an answer to reveal the explanation.
Short Explanation
Core risk is the bicycle; Advanced Risk adds continuous monitoring and richer assessment gears on the same bike. It is not a new SIR playbook world and it does not rip out the entity framework.
Full Explanation
Advanced Risk extends core IRM risk with capabilities such as continuous monitoring and more advanced assessment methodologies while still relying on entities, statements, and risk instances. It is not a replacement for the entity framework, a cosmetic report skin only, or Security Incident Response content.