Define the Reasons Why an Effective Cybersecurity Stance Is Important. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 5)

Questions 21–23

1. 21expert · hard

   A multinational corporation is adopting the NIST CSF. The CISO must decide how to allocate a limited budget across multiple business units. The board wants to understand which investments will most reduce overall enterprise risk. Which approach best aligns with the NIST CSF's risk-management philosophy?

   • AInvest the entire budget in the business unit with the highest revenue to maximize financial return.
   • BDefer all cybersecurity investments until a major incident occurs to justify the budget.
   • CPrioritize business units based on a risk assessment that considers the likelihood and impact of potential cyber incidents.
   • DAllocate the budget equally across all business units to ensure fairness and avoid perceived favoritism.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which statement best describes why an effective cybersecurity stance is critical for an organization?

   • AIt protects organizational assets and supports business continuity by managing risks to an acceptable level.
   • BIt ensures that all security controls are automated and require no human intervention.
   • CIt primarily focuses on satisfying regulatory requirements rather than operational needs.
   • DIt guarantees that the organization will never experience a security breach.
   Reveal Solution Discussion Select an answer first
3. 23foundation · easy

   How does the NIST Cybersecurity Framework (CSF) help an organization improve its cybersecurity stance?

   • AIt offers a common language and structure for managing cybersecurity risk.
   • BIt provides a prescriptive set of security products that must be purchased.
   • CIt replaces the need for an organization's own risk management process.
   • DIt guarantees compliance with all regulatory requirements.
   Reveal Solution Discussion Select an answer first