Assign Ownership and Responsibility for Each Asset. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 5)

Questions 21–22

1. 21expert · hard

   A financial institution has a large asset inventory. They have recently undergone a merger, and many assets have been consolidated. The security team is updating ownership records. What is the most effective way to ensure that ownership is accurately updated after the merger?

   • AConduct a one-time comprehensive review of all assets and assign new owners based on the new organizational structure.
   • BEstablish a recurring process that reviews ownership assignments on a regular basis and triggers updates based on organizational changes.
   • CRely on the new department heads to report ownership changes as they occur.
   • DUpdate ownership records only for assets that have been flagged as critical during the merger.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is a primary duty of an asset owner regarding risk management?

   • ATo understand the risks to the asset and ensure appropriate controls are in place.
   • BTo approve all security policies for the entire organization.
   • CTo ensure the asset is never taken offline for maintenance.
   • DTo personally implement every security control for the asset.
   Reveal Solution Discussion Select an answer first