NISTNIST CSFFramework ImplementationEASYFree question
What distinguishes a Tier 4 (Adaptive) organization from lower tiers?
- A.It maintains a centralized risk register reviewed by the board each quarter and funds a dedicated threat hunting team inside each of its business units
- B.It documents repeatable procedures for onboarding new vendors and obtains an independent attestation of those procedures from an accredited third party auditor
- C.It adapts its cybersecurity practices based on lessons learned and predictive indicators derived from previous and current cybersecurity activities
- D.It participates in sector information sharing exchanges and publishes its internal risk metrics to regulators and customers on a quarterly reporting schedule
Why C is correct
Tier 4 (Adaptive) organizations adapt their cybersecurity practices based on lessons learned and predictive indicators, continuously evolving their approach using real-time information about the threat landscape.
Know someone studying for NIST CSF? Send them this one.