What is the NIST Cybersecurity Framework primarily used for?
- A.Detecting malware on endpoints
- B.Providing guidelines for organizations to manage and reduce cybersecurity risk
- C.Certifying cybersecurity professionals; NIST publications are legally binding regulations in every country
- D.Encrypting sensitive government data
Why B is correct
The NIST Cybersecurity Framework (CSF) provides a voluntary set of guidelines, best practices, and standards for managing cybersecurity risk. It is organized into five core functions: Identify, Protect, Detect, Respond, and Recover. Organizations of all sizes use it to assess and improve their cybersecurity posture.
Know someone studying for Security Fundamentals? Send them this one.