What is the PRIMARY purpose of the Identify function in the NIST Cybersecurity Framework?
- A.To restore normal operations and support timely recovery of systems, services, and capabilities after an incident
- B.To detect anomalous events in real time across systems, networks, and data flows
- C.To develop organizational understanding of cybersecurity risk to systems, assets, data, and capabilities
- D.To design and deploy safeguards that limit or contain the impact of a cybersecurity event, once one is confirmed
Why C is correct
The Identify function helps organizations develop an understanding of their environment to manage cybersecurity risk to systems, assets, data, and capabilities, forming the foundation for all other framework functions.
Know someone studying for NIST CSF? Send them this one.