NISTNIST CSFDetect FunctionEASYFree question
Which of the following is an example of a security continuous monitoring control under DE.CM?
- A.Deploying an intrusion detection system that monitors network traffic in real time
- B.Conducting a satisfaction survey among employees about the cafeteria service each quarter
- C.Drafting a five-year staffing roadmap for the physical security guard rotation schedule
- D.Reviewing vendor invoices for consistency with the annual procurement budget each cycle
Why A is correct
An intrusion detection system continuously monitoring network traffic is a core example of security continuous monitoring, providing real-time visibility into potential cybersecurity events on the network.
Know someone studying for NIST CSF? Send them this one.