NISTNIST CSFGovern FunctionEASYFree question
What is the role of cybersecurity policy in the Govern function?
- A.To provide a technical checklist that scans and remediates vulnerabilities on production servers automatically
- B.To provide a training schedule that tracks and reports course completion rates each quarter for department heads
- C.To provide documented guidelines that direct and support cybersecurity risk management activities
- D.To provide a ticketing queue that routes and escalates help desk requests to on-call engineers overnight
Why C is correct
Cybersecurity policies provide documented guidelines and expectations that direct and support the organization's cybersecurity risk management activities across all functions.
Know someone studying for NIST CSF? Send them this one.