In CSF version 1.1, what does Protective Technology (PR.PT) encompass?
- A.Assessing organizational risk tolerance, and documenting the underlying assumptions, and briefing the board on strategy each quarter
- B.Identifying critical suppliers, and tracking their contractual obligations for breach notification, audit rights, and termination clauses
- C.Coordinating recovery communications, and updating stakeholders continuously once services are restored following the disruption event
- D.Technical security solutions managed to ensure the security and resilience of systems, including audit logging, removable media controls, communication protections, and resilience mechanisms
Why D is correct
Protective Technology covers technical controls including logging, access enforcement, communication protection, and system resilience mechanisms that safeguard systems and data.
Know someone studying for NIST CSF? Send them this one.