According to the NIST CSF 1.1 Core, what does the Maintenance (PR.MA) category require?
- A.Cataloging hardware and software assets, and assigning a responsible owner for each item across the inventory
- B.Detecting anomalous login patterns, and forwarding the resulting alerts to the response team promptly for triage
- C.Restoring encrypted backups, and confirming data integrity once recovery has completed for the affected system
- D.Performing maintenance and repairs of organizational assets in a manner consistent with policies and procedures, including remote and on-site maintenance activities
Why D is correct
Proper maintenance ensures systems remain secure through patching, updates, and repairs while controlling maintenance access to prevent unauthorized modifications or data exposure.
Know someone studying for NIST CSF? Send them this one.