Which of the following tiers addresses risks from an information system perspective?
A.
Tier 0
B.
Tier 3
C.
Tier 2
D.
Tier 1
Explanation:
The information system level is the tier 3. It addresses risks from an information
system perspective, and is guided by the risk decisions at tiers 1 and 2. Risk decisions at tiers 1
and 2 impact the ultimate selection and deployment of requisite safeguards. This also has an
impact on the countermeasures at the information system level. The RMF primarily operates at
level is the Tier 2, and it addresses risks from the mission and business process perspective.