NISTNIST CSFRespond FunctionEASYFree question
What does the Mitigation category (RS.MI) focus on?
- A.Performing tabletop exercises, updating the written response plan, and assigning new escalation contacts each quarter
- B.Performing patch deployment, hardening configurations, and reducing the organization's overall attack surface
- C.Performing vulnerability scanning, patch verification, and configuration audits across production systems
- D.Performing activities to prevent expansion of an event, mitigate its effects, and resolve the incident
Why D is correct
Mitigation (RS.MI) focuses on activities to prevent the expansion of an event, mitigate its effects, and resolve the incident to minimize damage and restore normal operations.
Know someone studying for NIST CSF? Send them this one.