NISTNIST CSFGovern FunctionEASYFree question
What is the purpose of a cybersecurity policy framework?
- A.To provide a rotating on-call schedule of engineers, technicians, and managers who respond to overnight system alerts
- B.To provide a searchable archive of past incident tickets, root cause notes, and closure summaries for the help desk team and its quarterly retrospectives
- C.To provide a structured hierarchy of policies, standards, guidelines, and procedures that govern cybersecurity activities
- D.To provide a shared calendar of vendor renewal dates, and payment deadlines, for the procurement staff
Why C is correct
A cybersecurity policy framework provides a structured hierarchy of documents including policies, standards, guidelines, and procedures that collectively govern the organization's cybersecurity activities.
Know someone studying for NIST CSF? Send them this one.