What is the PRIMARY purpose of the Detect function in the NIST Cybersecurity Framework?
- A.To develop and implement appropriate activities to identify the occurrence of a cybersecurity event
- B.To coordinate incident containment steps and assign remediation deadlines once a confirmed breach has already been reported
- C.To restore encrypted backups and validate system integrity after a ransomware payload has finished executing
- D.To catalog approved vendor products and renew support contracts before each fiscal year's procurement cycle begins
Why A is correct
The Detect function enables timely discovery of cybersecurity events by developing and implementing the appropriate activities to identify the occurrence of a cybersecurity event.
Know someone studying for NIST CSF? Send them this one.