NISTNIST CSFIdentify FunctionEASYFree question
What is the relationship between the Identify function and an organization's risk tolerance?
- A.The Detect function helps configure and tune the organization's alert thresholds and correlation rules, which guides decisions about analyst staffing and shift coverage for the monitoring team
- B.The Protect function helps deploy and maintain the organization's endpoint agents and configuration baselines, which guides decisions about patch cadence and license renewal for the tooling budget
- C.The Identify function helps establish and communicate the organization's risk tolerance, which guides decisions about acceptable risk levels and resource allocation for cybersecurity
- D.The Respond function helps draft and rehearse the organization's notification templates and escalation scripts, which guides decisions about legal review and customer communication timing during an incident
Why C is correct
Understanding risk tolerance is a key outcome of the Identify function, enabling the organization to make informed decisions about which risks to accept, mitigate, transfer, or avoid.
Know someone studying for NIST CSF? Send them this one.