What are the various Tier 1 activities?

The organization level is the Tier 1 and it addresses risks from an organizational perspective.
What are the various Tier 1 activities? Each correct answer represents a complete solution.
Choose all that apply.

A.
The organization plans to use the degree and type of oversight, to ensure that the risk
management strategy is being effectively carried out.

B.
The level of risk tolerance.

C.
The techniques and methodologies an organization plans to employ, to evaluate information
system-related security risks.

D.
The RMF primarily operates at Tier 1.

Explanation:
The Organization Level is the Tier 1, and it addresses risks from an organizational
perspective. It includes the following points: The techniques and methodologies an organization
plans to employ, to evaluate information system-related security risks. During risk assessment, the

methods and procedures the organization plans to use, to evaluate the significance of the risks
identified. The types and extent of risk mitigation measures the organization plans to employ, to
address identified risks. The level of risk tolerance. According to the environment of operation,
how the organization plans to monitor risks on an ongoing basis, given the inevitable changes to
organizational information system.
The organization plans to use the degree and type of oversight, in order to ensure that the risk
operates at Tier 3.