NISTNIST CSFGovern FunctionEASYFree question
What is the primary purpose of the Govern function in NIST CSF 2.0?
- A.To detect cybersecurity incidents in real time
- B.To establish, communicate, and monitor the organization's cybersecurity risk management strategy, expectations, and policy
- C.To respond to active cybersecurity threats
- D.To recover systems after a cybersecurity incident
Why B is correct
The Govern function establishes, communicates, and monitors the organization's cybersecurity risk management strategy, expectations, and policy, providing overarching governance for all other CSF functions.
Know someone studying for NIST CSF? Send them this one.