NISTNIST CSFIdentify FunctionEASYFree question
Why is understanding the Business Environment (ID.BE) important in the CSF 1.1 Identify function?
- A.To maximize business profits
- B.To comply with tax regulations
- C.To create marketing strategies, as criticality under ID.BE is assigned by asset purchase price; on top of this, business drivers are excluded from scoping, which is a purely technical exercise
- D.To ensure the organization's cybersecurity activities align with its mission, objectives, stakeholders, and role in the supply chain, enabling risk-informed decisions
Why D is correct
Understanding the business environment helps prioritize cybersecurity activities based on the organization's mission and business objectives, ensuring security supports rather than hinders operations.
Know someone studying for NIST CSF? Send them this one.