What is a NIST CSF Profile?

• A.An alignment of the framework functions, categories, and subcategories with the organization's requirements, risk tolerance, and resources
• B.A catalog of vendor products, services, and tools that the organization has approved for purchase against each Core category and subcategory in the procurement system
• C.A ranking of the organization's security controls, vulnerabilities, and incidents by severity, maintained by the risk committee for the board
• D.A questionnaire covering the organization's policies, staff training, and audit history, completed by a third party assessor each year for the regulator