NISTNIST CSFProtect FunctionEASYFree question
What role do security policies play in the Protect function?
- A.Policies record the vendor that supports each production system, and schedule renewal reminders, and route the renewal paperwork to procurement for signature each cycle
- B.Policies catalog the physical location of each asset, and assign a facilities contact, and track relocation requests submitted by department heads
- C.Policies summarize completed training modules, and calculate a completion percentage, and forward that percentage to HR for the quarterly dashboard review
- D.Policies establish formal requirements and expectations for security controls, user behavior, system configurations, and operational procedures, providing the governance framework for consistent protection implementation
Why D is correct
Policies translate risk management decisions into actionable requirements. They define what must be done, who is responsible, and what standards must be met across the organization's security program.
Know someone studying for NIST CSF? Send them this one.