What is the Oversight category (GV.OV) in the Govern function responsible for?
- A.Ensuring that endpoint agents are installed and configured correctly across each laptop before deployment to end users across each regional office
- B.Ensuring that firewall rulesets are reviewed and tuned to reduce false positive alerts generated by the intrusion detection system
- C.Ensuring that backup jobs are scheduled and monitored for the file servers each business night
- D.Ensuring that cybersecurity risk management activities are reviewed and adjusted to maintain alignment with organizational needs
Why D is correct
The Oversight category ensures that cybersecurity risk management activities and results are reviewed and adjusted to maintain alignment with organizational requirements and changing conditions.
Know someone studying for NIST CSF? Send them this one.