What does ID.AM-6 require regarding cybersecurity roles and responsibilities?
- A.Cybersecurity budget requests and multi-year staffing forecasts for the coming fiscal years are drafted and submitted to finance
- B.Cybersecurity roles and responsibilities for the entire workforce and third-party stakeholders are established
- C.Cybersecurity patch deployment windows and rollback procedures for the coming maintenance cycle are scheduled and tested for the change board
- D.Cybersecurity incident tickets for the current quarter are closed and archived
Why B is correct
Establishing clear cybersecurity roles and responsibilities across the workforce ensures accountability and proper execution of security activities at all organizational levels.
Know someone studying for NIST CSF? Send them this one.