Cissp Domain 1: Nist Risk Management Framework & Practice Question