What is the PRIMARY purpose of the Protect function in the NIST Cybersecurity Framework?
- A.To detect and analyze cybersecurity events after they occur across monitored systems
- B.To contain and eradicate a confirmed incident before restoring affected services
- C.To catalog organizational assets and rank cybersecurity risks before decisions are made
- D.To develop and implement appropriate safeguards to ensure delivery of critical services
Why D is correct
The Protect function supports the ability to limit or contain the impact of a potential cybersecurity event by developing and implementing appropriate safeguards for critical infrastructure services.
Know someone studying for NIST CSF? Send them this one.