Which of the following statements about the NIST Cybersecurity Framework is not true?
A) One of the main goals is to address and manage cybersecurity risk in a cost-effective way to protect critical infrastructure.
B) It is aimed to replace an existing risk management process and cybersecurity program in an organization.
C) An organization that doesn’t have an existing cybersecurity program can use the NIST Cybersecurity Framework as a reference to develop such a program.
D) The NIST Cybersecurity Framework is developed with a common taxonomy.
B) It is aimed to replace an existing risk management process and cybersecurity program in an organization.
You might also like to view...
On an icon, which symbol indicates that the icon is a shortcut?
A) Triangle B) Arrow C) Circle D) Box
What would you use to mark the parent in a description list?
a. dl b. dt c. dd d. li e. None of the above.