NISTNIST CSFProfiles RiskEASYFree question
Can an organization create multiple Framework Profiles?
- A.Yes, organizations can create profiles for different business lines, subsidiaries, or specific systems to address their unique requirements
- B.No, each organization can only have one profile
- C.Multiple profiles are only allowed for government agencies
- D.Profiles can only be created at the enterprise level
Why A is correct
Organizations can create multiple profiles tailored to different business lines, subsidiaries, operational environments, or specific critical systems, each reflecting the unique cybersecurity requirements of that context.
Know someone studying for NIST CSF? Send them this one.