NISTNIST CSFIdentify FunctionEASYFree question
Why does the Identify function include Supply Chain Risk Management (ID.SC)?
- A.To detect, contain, and eradicate cybersecurity incidents associated with the network perimeter, including firewalls and intrusion prevention sensors
- B.To restore, validate, and resume cybersecurity operations associated with system recovery, including backups and failover data centers
- C.To train, test, and certify cybersecurity awareness associated with the workforce, including new hires and seasonal contractors
- D.To identify, assess, and manage cybersecurity risks associated with the supply chain, including third-party service providers and suppliers
Why D is correct
Supply chain risk management ensures the organization understands and manages cybersecurity risks from its suppliers, service providers, and partners that could impact its systems and data.
Know someone studying for NIST CSF? Send them this one.