What is the purpose of identifying critical infrastructure and resources?
- A.To prioritize protection efforts based on the relative importance of different assets to the organization's mission and business operations
- B.To schedule maintenance visits based on the physical location of different assets across the organization's regional offices and warehouses
- C.To assign warranty claims based on the purchase date of different assets across the organization's finance and procurement systems
- D.To plan replacement budgets based on the depreciation schedule and useful life of different assets across the organization's accounting ledgers
Why A is correct
Identifying critical resources helps organizations focus cybersecurity investments and protection measures on the most important assets that, if compromised, would most significantly impact operations.
Know someone studying for NIST CSF? Send them this one.