ExamGecko
Question list
Search
Search

Question 15 - NIST-COBIT-2019 discussion

Report
Export

What is the MOST important reason to compare framework profiles?

A.

To improve security posture

Answers
A.

To improve security posture

B.

To conduct a risk assessment

Answers
B.

To conduct a risk assessment

C.

To identify gaps

Answers
C.

To identify gaps

Suggested answer: C

Explanation:

The most important reason to compare framework profiles is to identify gaps between the current and target state of cybersecurity activities and outcomes, and to prioritize the actions needed to address them12. Framework profiles are the alignment of the functions, categories, and subcategories of the NIST Cybersecurity Framework with the business requirements, risk tolerance, and resources of the organization3. By comparing the current profile (what is being achieved) and the target profile (what is needed), an organization can assess its cybersecurity posture and develop a roadmap for improvement4.

asked 18/11/2024
Vusani Nedzungani
50 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first