NISTNIST CSFGovern FunctionEASYFree question
What is the purpose of a cybersecurity policy framework?
- A.To provide a structured hierarchy of policies, standards, guidelines, and procedures that govern cybersecurity activities
- B.To create a single document that replaces all security controls
- C.To satisfy audit requirements without practical implementation
- D.To document the organization's IT budget
Why A is correct
A cybersecurity policy framework provides a structured hierarchy of documents including policies, standards, guidelines, and procedures that collectively govern the organization's cybersecurity activities.
Know someone studying for NIST CSF? Send them this one.