NISTNIST CSFFramework ImplementationEASYFree question
What are informative references in the NIST CSF?
- A.Required checklists, templates, and forms that regulators issue for each category
- B.Vendor product manuals, configuration guides, and support contracts that supply the tools for each category and subcategory
- C.Summaries of past incident reports, audit findings, and lessons learned that justify each subcategory outcome to the board
- D.Links to existing standards, guidelines, and practices that provide additional detail for implementing subcategories
Why D is correct
Informative references are links to existing standards, guidelines, and best practices (such as ISO 27001, CIS Controls, COBIT) that provide implementation detail for each subcategory.
Know someone studying for NIST CSF? Send them this one.