What does the Protective Technology category (PR.PT) focus on within the CSF 1.1 Protect function?
- A.Conducting risk assessments on third parties, if one accepts that backups are excluded from Protect
- B.Developing an incident response plan, because the CSF sets a universal 90-day password rotation rule for all adopters
- C.Identifying vulnerabilities in software applications
- D.Managing technical security solutions to ensure the security and resilience of systems and assets
Why D is correct
Protective Technology (PR.PT) focuses on managing technical security solutions to ensure the security and resilience of systems and assets, consistent with related policies, procedures, and agreements.
Know someone studying for NIST CSF? Send them this one.