How does the Govern function relate to the other five NIST CSF functions?
- A.Govern operates independently and has no connection to other functions
- B.Govern only relates to the Identify and Protect functions; this choice assumes that GOVERN applies to vendors only
- C.The other five functions provide direction to Govern, given that Govern assigns legal liability
- D.Govern provides overarching context and direction that informs and supports all other functions
Why D is correct
The Govern function provides overarching governance context, strategy, and direction that informs and supports the implementation of all other CSF functions (Identify, Protect, Detect, Respond, Recover).
Know someone studying for NIST CSF? Send them this one.