NISTNIST CSFGovern FunctionEASYFree question
What does the Roles, Responsibilities, and Authorities category (GV.RR) ensure?
- A.That firewall rules, VPN configurations, and endpoint policies are tested and deployed consistently
- B.That patch levels, antivirus signatures, and log retention periods are checked and updated regularly
- C.That cybersecurity roles, responsibilities, and authorities are established and communicated throughout the organization
- D.That vendor contracts, service levels, and renewal dates are tracked and reviewed annually
Why C is correct
GV.RR ensures that cybersecurity roles, responsibilities, and authorities are clearly established, communicated, and understood throughout the organization, enabling accountability.
Know someone studying for NIST CSF? Send them this one.