NISTNIST CSFProfiles RiskEASYFree question
What is the PRIMARY purpose of a NIST CSF Profile?
- A.To record the assessment scores of each supplier, the contract owners, and the renewal dates in one register maintained by the procurement department
- B.To align the framework's functions, categories, and subcategories with the organization's specific business requirements and risk tolerance
- C.To list the approved security vendors, product versions, and licence expiry dates for the audit team
- D.To rank the Framework categories by cost, publish the ranking, and give the board a pricing guide
Why B is correct
A NIST CSF Profile aligns the framework's functions, categories, and subcategories with the organization's specific business requirements, risk tolerance, and available resources.
Know someone studying for NIST CSF? Send them this one.