NISTNIST CSFProfiles RiskEASYFree question
What is the PRIMARY purpose of a NIST CSF Profile?
- A.To create a standardized security configuration for all organizations, and it presupposes that a Profile covers individual technical controls
- B.To align the framework's functions, categories, and subcategories with the organization's specific business requirements and risk tolerance
- C.To provide a certification level for the organization's cybersecurity, as a clean penetration test freezes the Target Profile for the following year
- D.To define the technical architecture of security systems, since the Current Profile records planned controls rather than the state actually in place
Why B is correct
A NIST CSF Profile aligns the framework's functions, categories, and subcategories with the organization's specific business requirements, risk tolerance, and available resources.
Know someone studying for NIST CSF? Send them this one.