NISTNIST CSFProfiles RiskEASYFree question
What does a Target Profile represent?
- A.The security controls currently in operation across the organization and the findings from the latest internal audit review
- B.The list of regulations the organization must follow and the penalties that apply when a regulator finds a violation
- C.The historical incidents the organization suffered and the lessons it drew from each one
- D.The desired cybersecurity outcomes the organization wants to achieve based on its needs and risk tolerance
Why D is correct
A Target Profile represents the desired cybersecurity outcomes an organization aims to achieve, informed by business needs, risk tolerance, regulatory requirements, and available resources.
Know someone studying for NIST CSF? Send them this one.