NISTNIST CSFFramework ImplementationEASYFree question
What is the FIRST step an organization should take when implementing the NIST Cybersecurity Framework?
- A.Understand the organization's current cybersecurity posture and business context
- B.Select a Target Profile from the Core subcategories and assign owners to each outcome
- C.Buy a monitoring platform and connect it to the incident response team
- D.Appoint a steering committee and assign a Tier target to each unit
Why A is correct
The first step is understanding the current cybersecurity posture and business context, which informs all subsequent implementation decisions and ensures alignment with organizational needs.
Know someone studying for NIST CSF? Send them this one.