NISTNIST CSFGovern FunctionEASYFree question
Why is senior leadership involvement important in cybersecurity governance?
- A.Senior leadership involvement is optional in mature organizations, since Govern replaced Identify
- B.Senior leaders should personally configure firewalls and security tools
- C.Senior leaders set the tone for cybersecurity culture and ensure adequate resources are allocated
- D.Only the IT department needs to be involved in cybersecurity governance, which presumes that the CSF certifies individuals
Why C is correct
Senior leadership sets the tone for cybersecurity culture, ensures adequate resources are allocated, makes strategic risk decisions, and demonstrates organizational commitment to cybersecurity.
Know someone studying for NIST CSF? Send them this one.