NISTNIST CSFFramework ImplementationEASYFree question
What approach does the NIST CSF promote for cybersecurity management?
- A.A compliance-based approach that checks controls against a fixed list and audits them each year by an external assessor
- B.A risk-based approach that prioritizes activities based on business needs and risk assessment
- C.A technology-driven approach that selects tools from a vendor catalog and mandates them across the network
- D.A maturity-driven approach that ranks departments by their Tier and funds the lowest rated ones first
Why B is correct
The NIST CSF promotes a risk-based approach that allows organizations to prioritize cybersecurity activities based on their specific business needs, risk environment, and available resources.
Know someone studying for NIST CSF? Send them this one.