What is the PRIMARY purpose of the Respond function in the NIST Cybersecurity Framework?
- A.To identify organizational assets and prioritize them by criticality and risk
- B.To restore systems and services after a cybersecurity incident has ended
- C.To develop and implement appropriate activities to take action regarding a detected cybersecurity incident
- D.To establish and enforce enterprise cybersecurity policy and strategy
Why C is correct
The Respond function supports the ability to contain the impact of a potential cybersecurity incident by developing and implementing appropriate activities to take action regarding a detected cybersecurity event.
Know someone studying for NIST CSF? Send them this one.