Why is mapping data flows important in the Identify function?
- A.To understand how data moves within and outside the organization, enabling identification of potential exposure points and appropriate protection measures
- B.To understand how tickets escalate within and outside the help desk, enabling measurement of average resolution time and staffing needs
- C.To understand how invoices route within and outside procurement, enabling tracking of payment timelines and vendor renewal dates
- D.To understand how visitors move within and outside the building, enabling scheduling of badge issuance and escort assignments
Why A is correct
Data flow mapping reveals where sensitive data is created, stored, processed, and transmitted, helping identify protection requirements and potential vulnerability points throughout the data lifecycle.
Know someone studying for NIST CSF? Send them this one.