NISTNIST CSFFramework ImplementationEASYFree question
What approach does the NIST CSF promote for cybersecurity management?
- A.A reactive approach that only addresses incidents after they occur
- B.A compliance-based approach that requires implementing every control
- C.A technology-based approach that focuses on specific security products
- D.A risk-based approach that prioritizes activities based on business needs and risk assessment
Why D is correct
The NIST CSF promotes a risk-based approach that allows organizations to prioritize cybersecurity activities based on their specific business needs, risk environment, and available resources.
Know someone studying for NIST CSF? Send them this one.