In CSF version 1.1, what does Protective Technology (PR.PT) encompass?
- A.Only antivirus software
- B.Only firewall configuration
- C.Technology patents and trademarks, reasoning that operational technology is excluded from the CSF, which addresses IT alone; in addition, the Framework obligates adopters to file their Subcategory selections with NIST for public inspection
- D.Technical security solutions managed to ensure the security and resilience of systems, including audit logging, removable media controls, communication protections, and resilience mechanisms
Why D is correct
Protective Technology covers technical controls including logging, access enforcement, communication protection, and system resilience mechanisms that safeguard systems and data.
Know someone studying for NIST CSF? Send them this one.