Assign Ownership and Responsibility for Each Asset. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Why is it important to document asset ownership assignments?

   • ATo provide a clear record of who is accountable for each asset's protection.
   • BTo allow anyone to see the owner's personal contact information.
   • CTo replace the need for an asset inventory.
   • DTo satisfy a legal requirement that all organizations must document asset ownership.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A technology company has a policy that requires every asset to have an owner. However, some employees have been assigned as owners for assets they do not fully understand. The CISO wants to ensure that owners are competent and accountable. What is the best way to address this?

   • AReview each ownership assignment to ensure the owner has the appropriate knowledge and authority, and reassign if necessary.
   • BAutomatically assign ownership to the most senior person in the department.
   • CRequire all asset owners to sign a document stating they understand their responsibilities.
   • DProvide training to all asset owners on their roles and responsibilities.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Why should asset ownership be periodically reviewed and updated?

   • ATo ensure the asset owner is the most senior person in the company.
   • BTo comply with a requirement to change owners every year.
   • CTo reflect organizational changes such as role changes, acquisitions, or asset retirements.
   • DTo reduce the number of assets in the inventory.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A retail company has an asset inventory with assigned owners. Over the past year, several employees have left and new ones have been hired, and some assets have been moved between departments. What is the best way to ensure ownership assignments remain accurate?

   • AConduct a quarterly review of asset ownership and update assignments based on organizational changes.
   • BAsk each department manager to report any changes immediately, but do not schedule formal reviews.
   • CAutomatically assign new employees as owners of assets in their department without review.
   • DWait until the annual audit to update ownership records.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In the context of the NIST Cybersecurity Framework's Identify function, what does it mean for an asset to have an assigned owner?

   • AA specific individual or role is accountable for the asset's protection and for making risk-based decisions about it.
   • BThe IT department has administrative access to the asset and can configure its security settings.
   • CThe asset is connected to the network and actively monitored by the security operations center.
   • DThe asset is listed in the inventory with a unique identifier and a description of its function.
   Reveal Solution Discussion Select an answer first