NISTNIST CSFProfiles RiskEASYFree question
Who should be involved in creating a Framework Profile?
- A.Stakeholders from across the organization including business leaders, IT, security, legal, compliance, and risk management
- B.Members of the security operations center, including tier one analysts, shift leads, and the managed detection vendor staff
- C.The CISO and one external consultant, who draft the profile in isolation then submit it to the board committee for formal sign-off
- D.System administrators, network engineers, and help desk staff who run the daily operations of the production technology stack
Why A is correct
Profile creation requires input from diverse stakeholders including business leaders, IT, security, legal, compliance, and risk management to ensure the profile accurately reflects organizational needs and priorities.
Know someone studying for NIST CSF? Send them this one.