NISTNIST CSFIdentify FunctionEASYFree question
What is the Governance category (ID.GV) within the Identify function concerned with?
- A.The technical controls and monitoring tools used to detect intrusions, correlate alerts, and escalate incidents across the network perimeter and connected cloud environments
- B.The staffing rotations and escalation contacts used to triage incidents, coordinate handoffs, and notify stakeholders across the security operations center and its partners
- C.The policies, procedures, and processes to manage and monitor regulatory, legal, risk, environmental, and operational requirements
- D.The backup schedules and recovery procedures used to restore systems, validate integrity, and resume services after a disruption across business units
Why C is correct
Governance (ID.GV) addresses the policies, procedures, and processes to manage and monitor the organization's regulatory, legal, risk, environmental, and operational requirements, informing management of cybersecurity risk.
Know someone studying for NIST CSF? Send them this one.