NISTNIST CSFGovern FunctionEASYFree question
What is cybersecurity risk tolerance?
- A.The maximum dollar payout a cyber insurance policy provides after one covered incident under the current terms
- B.The number of vulnerabilities a scanner reports in a single weekly assessment cycle across the fleet
- C.The percentage of employees who completed the annual training module before the internal reporting deadline
- D.The level of cybersecurity risk the organization is willing to accept in pursuit of its objectives
Why D is correct
Cybersecurity risk tolerance defines the level of risk an organization is willing to accept in pursuit of its business objectives, guiding decisions about risk mitigation, transfer, or acceptance.
Know someone studying for NIST CSF? Send them this one.