NISTNIST CSFGovern FunctionEASYFree question
What is the PRIMARY purpose of the Govern function in NIST CSF 2.0?
- A.To establish, communicate, and monitor the organization's cybersecurity risk management strategy, expectations, and policy
- B.To assign and track individual employee security awareness scores, remediation deadlines, and manager sign-offs across each department and regional office
- C.To configure and monitor firewall rules, endpoint alerts, and log retention settings across each managed environment and remote office
- D.To draft and file incident reports, breach notices, and audit responses for each affected business unit and its assigned regulators
Why A is correct
The Govern function establishes, communicates, and monitors the organization's cybersecurity risk management strategy, expectations, and policy, providing overarching governance for all other CSF functions.
Know someone studying for NIST CSF? Send them this one.