NISTNIST CSFGovern FunctionEASYFree question
What is the purpose of the Roles, Responsibilities, and Authorities category (GV.RR) in the Govern function?
- A.To document supplier certifications, audit results, and breach history for the sourcing team's annual vendor review
- B.To track policy review dates, approval signatures, and version history for compliance recordkeeping
- C.To establish and communicate cybersecurity roles, responsibilities, and authorities to foster accountability and enable informed decision-making
- D.To measure phishing click rates, training completion, and awareness quiz scores across departments
Why C is correct
Roles, Responsibilities, and Authorities (GV.RR) establishes and communicates clear cybersecurity roles, responsibilities, and authorities throughout the organization to foster accountability and informed decision-making.
Know someone studying for NIST CSF? Send them this one.