NISTNIST CSFGovern FunctionEASYFree question
What does the Organizational Context category (GV.OC) in the Govern function address?
- A.Tracking server uptime, patch compliance rates, and helpdesk ticket volumes across the entire IT department each month and reporting them to the CIO
- B.Assigning firewall change approvals, VPN access requests, and endpoint configuration standards to the network engineering team each sprint cycle
- C.Logging login attempts, password resets, and account lockouts for the identity team
- D.Understanding the organization's mission, stakeholder expectations, and legal/regulatory requirements related to cybersecurity
Why D is correct
Organizational Context (GV.OC) ensures the organization understands its mission, stakeholder expectations, and the legal, regulatory, and contractual requirements that influence cybersecurity risk management.
Know someone studying for NIST CSF? Send them this one.