Assign Ownership and Responsibility for Each Asset. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Why is asset inventory and categorization important before assigning ownership?

   • AIt eliminates the need for periodic reviews of ownership assignments.
   • BIt automatically assigns ownership based on the asset's technical characteristics.
   • CIt helps determine which assets require ownership assignment based on their importance and risk.
   • DIt is required by law for all organizations, regardless of size or industry.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   To whom should asset ownership assignments be communicated?

   • AOnly the organization's legal department.
   • BOnly the IT security team.
   • CAll employees, regardless of their role or need to know.
   • DThe asset owner and other stakeholders who need to know for risk and operational purposes.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A university has assigned ownership for its research data repositories to various faculty members. The CISO wants to ensure that these assignments are effective and that stakeholders are aware of them. Which action is most important for the CISO to take?

   • APublish the ownership assignments on the university's internal wiki and send an email to all faculty.
   • BCreate a formal document that lists each repository, its owner, and the owner's responsibilities, and distribute it to relevant stakeholders.
   • CAsk each faculty member to sign a statement acknowledging their ownership responsibilities.
   • DHold a meeting with all faculty to discuss the ownership assignments and answer questions.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A utility company is developing an asset inventory. They have assets such as control systems, office IT, and employee-owned devices used for remote work. The security team wants to ensure that all assets that require ownership are identified. Which criterion is most useful for determining which assets need formal ownership?

   • AThe asset's age and whether it is legacy technology.
   • BThe asset's brand and manufacturer.
   • CThe asset's value and criticality to the organization's operations.
   • DThe asset's physical location within the organization's facilities.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A logistics company has a fleet of GPS tracking devices installed in delivery vehicles. The operations manager is unsure who should be the owner of these devices. Which consideration is most important when defining ownership for these devices?

   • AThe individual drivers, because they use the devices daily.
   • BThe operations manager, because they are responsible for the fleet and the devices support fleet operations.
   • CThe vendor that supplies the devices, because they are responsible for their functionality.
   • DThe IT department, because they manage the network that the devices connect to.
   Reveal Solution Discussion Select an answer first