What is the NIST Cybersecurity Framework primarily used for?
- A.Certifying cybersecurity professionals
- B.Detecting malware on endpoints
- C.Providing guidelines for organizations to manage and reduce cybersecurity risk
- D.Encrypting sensitive government data
Why C is correct
The NIST Cybersecurity Framework (CSF) provides a voluntary set of guidelines, best practices, and standards for managing cybersecurity risk. It is organized into five core functions: Identify, Protect, Detect, Respond, and Recover. Organizations of all sizes use it to assess and improve their cybersecurity posture.
Know someone studying for Security Fundamentals? Send them this one.