In CSF version 1.1, what does the Detection Processes category (DE.DP) address?
- A.Selecting and financing detection tool purchases and negotiating multi-year vendor contract renewals across the enterprise
- B.Developing and maintaining the business continuity plan and disaster recovery runbooks for facilities and logistics teams
- C.Encrypting sensitive data and rotating cryptographic keys on a defined schedule
- D.Maintaining and testing detection processes and procedures to ensure timely and adequate awareness of anomalous events
Why D is correct
Detection Processes (DE.DP) addresses maintaining and testing detection processes and procedures to ensure timely and adequate awareness of anomalous events, including defining roles and responsibilities.
Know someone studying for NIST CSF? Send them this one.