What does Asset Management (ID.AM) cover in the NIST CSF?
- A.Reviewing and approving the budget, staffing, and vendor contracts that the finance department uses to close each quarter
- B.Inventorying and managing the data, personnel, devices, systems, and facilities that enable the organization to achieve business purposes
- C.Scheduling and tracking the training, certifications, and awareness campaigns that HR uses to measure workforce readiness
- D.Cataloging and reconciling the licenses, warranties, maintenance contracts, and support agreements that procurement uses to track vendor renewal obligations and budget forecasts
Why B is correct
Asset Management ensures the organization identifies and manages all physical and software assets, data flows, and external systems to support cybersecurity risk management decisions.
Know someone studying for NIST CSF? Send them this one.