What is a NIST CSF Profile?
- A.An alignment of the framework functions, categories, and subcategories with the organization's requirements, risk tolerance, and resources
- B.A template for writing cybersecurity policies, reasoning that an organization must reach Tier 3 before it is permitted to author a Target Profile
- C.A standardized set of security tools recommended by NIST
- D.A user account profile for accessing the NIST website, because the Framework's steps require the Target Profile to be built before the scope
Why A is correct
A NIST CSF Profile represents the alignment of the framework's functions, categories, and subcategories with the organization's business requirements, risk tolerance, and resources.
Know someone studying for NIST CSF? Send them this one.