How does the Govern function relate to the other five NIST CSF functions?
- A.Detect only reports anomalies and events after they have already occurred somewhere within monitored systems
- B.Respond only contains and eradicates confirmed incidents once analysts have approved the containment action
- C.Recover simply restores all systems and services after disruption ends
- D.Govern provides overarching context and direction that informs and supports all other functions
Why D is correct
The Govern function provides overarching governance context, strategy, and direction that informs and supports the implementation of all other CSF functions (Identify, Protect, Detect, Respond, Recover).
Know someone studying for NIST CSF? Send them this one.