NISTNIST CSFGovern FunctionEASYFree question
How does the Govern function address legal and regulatory compliance?
- A.By requiring the marketing team to review and approve each public statement, press release, and social media post before it references data handling practices
- B.By ensuring the facilities team inspects and certifies fire exits, elevators, and emergency lighting throughout the corporate campus each fiscal quarter
- C.By ensuring the organization understands and incorporates applicable legal, regulatory, and contractual requirements into its cybersecurity program
- D.By having procurement track and renew software licenses, maintenance contracts, and support agreements
Why C is correct
The Govern function ensures the organization identifies, understands, and incorporates all applicable legal, regulatory, and contractual cybersecurity requirements into its risk management program.
Know someone studying for NIST CSF? Send them this one.