NISTNIST CSFGovern FunctionEASYFree question
What does the Cybersecurity Supply Chain Risk Management category (GV.SC) address?
- A.Managing help desk staffing levels and shift coverage for the security operations center overnight and on weekends
- B.Managing firewall change requests and configuration approvals for the network engineering team
- C.Managing cybersecurity risks associated with the organization's supply chain and third-party relationships
- D.Managing employee badge access and visitor logs for the corporate headquarters building
Why C is correct
GV.SC addresses the identification, assessment, and management of cybersecurity risks associated with the organization's supply chain, including third-party service providers and product suppliers.
Know someone studying for NIST CSF? Send them this one.