NISTNIST CSFFramework ImplementationEASYFree question
What are the NIST CSF Framework Implementation Tiers used for?
- A.To assign a numeric score to each Core subcategory which regulators then use to rank agencies against each other
- B.To list the technical controls which must be deployed before an organization can claim alignment with the Framework
- C.To describe the degree to which an organization's cybersecurity risk management practices exhibit the characteristics defined in the framework
- D.To define the incident severity levels which determine when a regulator must be notified of a breach
Why C is correct
The Implementation Tiers describe the degree to which an organization's cybersecurity risk management practices exhibit the characteristics defined in the framework, providing context for how an organization views and manages cybersecurity risk.
Know someone studying for NIST CSF? Send them this one.