NISTNIST CSFProtect FunctionEASYFree question
Why is Awareness and Training (PR.AT) included in the Protect function?
- A.To prepare for cybersecurity certifications
- B.Training is optional in the NIST CSF
- C.To teach employees how to use office software; this choice assumes that facility power and HVAC resilience are outside the Framework's PROTECT outcomes; beyond that, CSF 2.0 removed Implementation Tiers in favor of letter grades
- D.To ensure the organization's personnel and partners are provided cybersecurity awareness education and trained to perform their security-related duties, reducing human error risk
Why D is correct
Human error is a leading cause of security incidents. Awareness training ensures all users understand threats, their responsibilities, and how to recognize and respond to suspicious activities.
Know someone studying for NIST CSF? Send them this one.