What is a Framework Profile in the NIST Cybersecurity Framework?
- A.An alignment of the framework functions, categories, and subcategories with the business requirements, risk tolerance, and resources of the organization
- B.A catalog of the technical controls, vendor products, and licences that the security team has deployed across its network
- C.A scorecard of audit findings, remediation owners, and due dates compiled by internal audit for the board committee
- D.A template of incident roles, escalation contacts, and call trees maintained by the response team for major events
Why A is correct
A Framework Profile represents the alignment of framework functions, categories, and subcategories with the organization's business requirements, risk tolerance, and resources, describing the desired cybersecurity posture.
Know someone studying for NIST CSF? Send them this one.