NISTNIST CSFGovern FunctionEASYFree question
What does the Roles, Responsibilities, and Authorities category (GV.RR) ensure?
- A.That only the IT department is responsible for cybersecurity
- B.That cybersecurity roles, responsibilities, and authorities are established and communicated throughout the organization
- C.That external consultants manage all cybersecurity functions
- D.That automated systems handle all cybersecurity decisions
Why B is correct
GV.RR ensures that cybersecurity roles, responsibilities, and authorities are clearly established, communicated, and understood throughout the organization, enabling accountability.
Know someone studying for NIST CSF? Send them this one.