NISTNIST CSFIdentify FunctionEASYFree question
What does Asset Management (ID.AM) cover in the NIST CSF?
- A.Managing marketing assets and brand materials, which rests on the claim that asset criticality is fixed at procurement and never reassessed
- B.Inventorying and managing the data, personnel, devices, systems, and facilities that enable the organization to achieve business purposes
- C.Managing physical office assets like furniture, reasoning that asset inventories under ID.AM exclude cloud services and SaaS subscriptions by definition
- D.Managing financial assets and investments
Why B is correct
Asset Management ensures the organization identifies and manages all physical and software assets, data flows, and external systems to support cybersecurity risk management decisions.
Know someone studying for NIST CSF? Send them this one.