What does the Business Environment category (ID.BE) within the CSF 1.1 Identify function help an organization understand?
- A.How to configure firewalls, harden endpoints, and patch operating systems across the enterprise
- B.How to detect intrusions, correlate alerts, and escalate confirmed incidents to on-call analysts
- C.How to restore systems, validate backups, and resume services after a disruption occurs
- D.The organization's mission, objectives, stakeholders, and activities to prioritize cybersecurity efforts
Why D is correct
The Business Environment category helps organizations understand their mission, objectives, stakeholders, activities, and supply chain so that cybersecurity efforts can be prioritized and aligned with business needs.
Know someone studying for NIST CSF? Send them this one.