NISTNIST CSFIdentify FunctionEASYFree question
Why is identifying external dependencies important in the Identify function?
- A.Internal handoffs (shift changes, ticket transfers, escalation calls) represent routine workflow steps; documenting them enables scheduling and coverage planning for the help desk
- B.Recurring expenses (software renewals, hosting fees, support contracts) represent budget line items; tracking them enables forecasting and approval routing for finance
- C.Physical access points (badge readers, visitor logs, loading docks) represent facilities checkpoints; auditing them enables staffing and maintenance planning for security guards
- D.External dependencies (cloud services, ISPs, supply chain partners) represent potential risk points; identifying them enables risk assessment and contingency planning for third-party failures
Why D is correct
External dependencies introduce risks beyond the organization's direct control. Identifying them enables risk assessment, contractual protections, and contingency planning for disruptions.
Know someone studying for NIST CSF? Send them this one.