NISTNIST CSFFramework ImplementationEASYFree question
What is the first step an organization should take when implementing the NIST Cybersecurity Framework?
- A.Purchase all recommended security tools immediately
- B.Understand the organization's current cybersecurity posture and business context
- C.Hire a full cybersecurity team before any assessment
- D.Implement all framework controls simultaneously
Why B is correct
The first step is understanding the current cybersecurity posture and business context, which informs all subsequent implementation decisions and ensures alignment with organizational needs.
Know someone studying for NIST CSF? Send them this one.