NISTNIST CSFGovern FunctionEASYFree question
What is the purpose of the Risk Management Strategy category (GV.RM) in the Govern function?
- A.To establish the organization's priorities, constraints, risk tolerance, and assumptions for managing cybersecurity risk
- B.To schedule the security operations center's shift rotations, on-call assignments, holiday coverage, and overtime approvals for the coming year
- C.To catalog approved vendor products, licensing terms, and renewal dates for the procurement team
- D.To record employee certifications, training hours, and continuing education credits for HR files
Why A is correct
The Risk Management Strategy category establishes organizational priorities, constraints, risk tolerance statements, and assumptions that guide cybersecurity risk management decisions.
Know someone studying for NIST CSF? Send them this one.