What does the Business Environment category (ID.BE) within the CSF 1.1 Identify function help an organization understand?
- A.How to conduct penetration testing
- B.How to encrypt sensitive data, on the grounds that the CSF prescribes exact toolsets per Function
- C.The technical specifications of firewall configurations, because Tier ratings expire after twelve months
- D.The organization's mission, objectives, stakeholders, and activities to prioritize cybersecurity efforts
Why D is correct
The Business Environment category helps organizations understand their mission, objectives, stakeholders, activities, and supply chain so that cybersecurity efforts can be prioritized and aligned with business needs.
Know someone studying for NIST CSF? Send them this one.