NISTNIST CSFIdentify FunctionEASYFree question
What does Governance (ID.GV) address in the NIST CSF Identify function?
- A.The dashboards, tickets, and escalation paths to triage and route the organization's help desk, network, and endpoint alerts, informing daily support operations
- B.The policies, procedures, and processes to manage and monitor the organization's regulatory, legal, risk, environmental, and operational requirements, informing cybersecurity risk management
- C.The schedules, checklists, and sign-offs to plan and verify the organization's patch, backup, and configuration changes, informing weekly maintenance windows
- D.The rosters, contacts, and playbooks to staff and coordinate the organization's on-call, escalation, and vendor response teams, informing incident handling
Why B is correct
Governance establishes the organizational structure, policies, and processes needed to manage cybersecurity risk, ensuring accountability and alignment with organizational objectives.
Know someone studying for NIST CSF? Send them this one.