NISTNIST CSFProfiles RiskEASYFree question
What is the purpose of comparing the Current Profile to the Target Profile?
- A.To identify gaps between the current and desired cybersecurity state for prioritized improvement
- B.To confirm that the current controls satisfy the regulator and to archive the evidence for the next external audit
- C.To determine the total cost of ownership of each security tool and to renegotiate the vendor licence terms
- D.To rank the organization against peers and publish the score on the website
Why A is correct
Comparing the Current Profile to the Target Profile identifies specific gaps between the organization's current cybersecurity state and its desired state, enabling prioritized improvement planning.
Know someone studying for NIST CSF? Send them this one.