NISTNIST CSFRespond FunctionEASYFree question
What is the purpose of the Analysis category (RS.AN) within the Respond function?
- A.To conduct containment actions, coordinating with affected business units and external vendors to limit further damage
- B.To manage stakeholder communications, drafting notification templates, legal disclosures, and media statements for regulators
- C.To conduct analysis to ensure effective response and support recovery activities, including forensic investigation
- D.To capture lessons learned, updating playbooks and escalation contacts for future incidents
Why C is correct
Analysis (RS.AN) ensures that analysis is conducted to support effective response activities, including understanding the incident, performing forensics, and determining the scope and impact of the event.
Know someone studying for NIST CSF? Send them this one.