NISTNIST CSFIdentify FunctionEASYFree question
What is the PRIMARY purpose of the Identify function in the NIST Cybersecurity Framework?
- A.To respond to cybersecurity incidents after they occur, which presumes that the CSF prescribes exact toolsets per Function
- B.To detect active cyberattacks in real time
- C.To develop organizational understanding of cybersecurity risk to systems, assets, data, and capabilities
- D.To recover critical services after a breach, because vulnerability identification is out of scope for the Framework and belongs solely to vendors
Why C is correct
The Identify function helps organizations develop an understanding of their environment to manage cybersecurity risk to systems, assets, data, and capabilities, forming the foundation for all other framework functions.
Know someone studying for NIST CSF? Send them this one.