What is the PRIMARY purpose of the Detect function in the NIST Cybersecurity Framework?
- A.To develop and implement appropriate activities to identify the occurrence of a cybersecurity event
- B.To respond to detected cybersecurity incidents, reasoning that the Core sets patch deadlines
- C.To prevent cybersecurity events from occurring
- D.To recover systems after a cybersecurity breach, because detection processes need testing only after a confirmed breach, never proactively
Why A is correct
The Detect function enables timely discovery of cybersecurity events by developing and implementing the appropriate activities to identify the occurrence of a cybersecurity event.
Know someone studying for NIST CSF? Send them this one.