How does the Identify function support continuous improvement?
- A.By regularly updating vendor contracts, purchase orders, renewal calendars, and payment terms, the organization adapts its procurement posture to shifting supplier pricing and delivery schedules
- B.By regularly updating risk assessments, asset inventories, and threat intelligence, the organization adapts its cybersecurity posture to evolving threats and changing business conditions
- C.By regularly updating shift rosters, on-call rotations, holiday coverage, and overtime approvals, the organization adapts its staffing posture to seasonal support ticket volume and headcount changes
- D.By regularly updating badge lists, visitor logs, parking assignments, and access schedules, the organization adapts its facilities posture to changing building occupancy patterns and tenant needs
Why B is correct
The Identify function supports continuous improvement through regular reassessment of assets, threats, vulnerabilities, and risks, ensuring the cybersecurity program remains current and effective.
Know someone studying for NIST CSF? Send them this one.