NISTNIST CSFGovern FunctionEASYFree question
What is the purpose of establishing cybersecurity accountability within an organization?
- A.To confirm badges and keycards are deactivated for departing staff each week
- B.To verify patches and updates are installed before the next scheduled audit cycle
- C.To ensure individuals and groups are responsible for cybersecurity outcomes and have the authority to act
- D.To track licenses and renewals before vendor contracts expire each quarter
Why C is correct
Cybersecurity accountability ensures that specific individuals and groups are responsible for cybersecurity outcomes and have the necessary authority and resources to fulfill their responsibilities.
Know someone studying for NIST CSF? Send them this one.