NISTNIST CSFProfiles RiskEASYFree question
What is the purpose of comparing the Current Profile to the Target Profile?
- A.To identify gaps between the current and desired cybersecurity state for prioritized improvement
- B.To determine which profile is more popular in the industry
- C.To choose between them for regulatory reporting
- D.To calculate the total number of security controls needed
Why A is correct
Comparing the Current Profile to the Target Profile identifies specific gaps between the organization's current cybersecurity state and its desired state, enabling prioritized improvement planning.
Know someone studying for NIST CSF? Send them this one.