NISTNIST CSFProtect FunctionEASYFree question
Why is patch management an important part of the Protect function?
- A.Awareness training reduces the likelihood that staff click phishing links, and reinforces reporting habits over successive quarterly campaigns
- B.Regular patching addresses known vulnerabilities in software and systems, preventing exploitation of security flaws that attackers actively target
- C.Network logging enables investigators to reconstruct an incident timeline, and supports later legal proceedings after a breach
- D.Backup testing confirms that data can be restored, and reduces uncertainty during an active incident response
Why B is correct
Vulnerabilities in software are regularly discovered and exploited. Timely patching closes these security gaps, reducing the organization's exposure to known attacks.
Know someone studying for NIST CSF? Send them this one.