Why is understanding the Business Environment (ID.BE) important in the CSF 1.1 Identify function?
- A.To ensure the organization's marketing activities align with its brand guidelines, sponsorships, media contacts, and role in industry associations, enabling consistent messaging across ongoing campaigns
- B.To ensure the organization's facilities activities align with its lease terms, maintenance vendors, parking allocations, and role in the building's tenant association, enabling smooth day-to-day operations
- C.To ensure the organization's payroll activities align with its compensation bands, benefits vendors, tax filings, and role in multi-state employment reporting, enabling accurate quarterly disbursements
- D.To ensure the organization's cybersecurity activities align with its mission, objectives, stakeholders, and role in the supply chain, enabling risk-informed decisions
Why D is correct
Understanding the business environment helps prioritize cybersecurity activities based on the organization's mission and business objectives, ensuring security supports rather than hinders operations.
Know someone studying for NIST CSF? Send them this one.