What is the PRIMARY purpose of the Protect function in the NIST CSF?
- A.To identify cybersecurity risks and catalog organizational assets for use in strategic planning across departments
- B.To detect anomalous behavior and generate alerts for the security operations center to review
- C.To develop and implement appropriate safeguards to ensure delivery of critical services and limit the impact of potential cybersecurity events
- D.To restore operations and coordinate stakeholder communications following a disruptive service outage
Why C is correct
The Protect function focuses on implementing safeguards that limit or contain the impact of cybersecurity events, supporting the ability to maintain critical operations.
Know someone studying for NIST CSF? Send them this one.