What does Data Security (PR.DS) protect against?
- A.Unauthorized physical entry into a facility, ensuring that badge readers and cameras remain functional, and that visitor logs are retained for a documented period each year
- B.Unpatched software vulnerabilities on managed endpoints, ensuring that scanning tools run on schedule, and that remediation windows are coordinated with change management
- C.Unauthorized access, exfiltration, corruption, or destruction of data, ensuring data is managed consistent with the organization's risk strategy to protect confidentiality, integrity, and availability
- D.Unapproved changes to production configurations, ensuring that change requests are documented, and that rollback procedures are tested before each deployment window
Why C is correct
Data Security protects information at rest, in transit, and during processing through encryption, access controls, integrity checking, and data lifecycle management.
Know someone studying for NIST CSF? Send them this one.