NISTNIST CSFProfiles RiskEASYFree question
What is the primary purpose of a NIST CSF Profile?
- A.To create a standardized security configuration for all organizations
- B.To align the framework's functions, categories, and subcategories with the organization's specific business requirements and risk tolerance
- C.To provide a certification level for the organization's cybersecurity
- D.To define the technical architecture of security systems
Why B is correct
A NIST CSF Profile aligns the framework's functions, categories, and subcategories with the organization's specific business requirements, risk tolerance, and available resources.
Know someone studying for NIST CSF? Send them this one.