NISTNIST CSFProtect FunctionEASYFree question
Why should removable media be controlled as part of the Protect function?
- A.To save money on USB drives
- B.Only government agencies need to control removable media
- C.Removable media is never used in modern organizations
- D.Removable media (USB drives, external hard drives) can introduce malware, enable data exfiltration, and bypass network security controls, requiring policies and technical controls to manage their use
Why D is correct
Removable media bypasses network-based protections and can introduce threats or enable data theft. Controls include encryption requirements, device whitelisting, and usage policies.
Know someone studying for NIST CSF? Send them this one.