NISTNIST CSFGovern FunctionEASYFree question
What is the Govern function introduced in NIST CSF 2.0?
- A.A subcategory within Identify that catalogs assets, tracks configurations, and feeds results into vulnerability scans
- B.A new function that establishes and monitors the organization's cybersecurity risk management strategy, expectations, and policy
- C.A network segmentation control that isolates guest devices, hardens endpoints, and blocks lateral movement
- D.A reporting template for federal contractors that logs FISMA milestones, audit findings, and remediation dates
Why B is correct
The Govern function in CSF 2.0 establishes and monitors the organization's cybersecurity risk management strategy, expectations, and policy, providing the overarching governance context for all other CSF functions.
Know someone studying for NIST CSF? Send them this one.