Describe the NIST CSF 2.0 Components. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a key update in NIST CSF 2.0 compared to version 1.1?

   • AIntroduction of a mandatory compliance certification.
   • BAddition of the Govern function.
   • CReduction of functions from six to five.
   • DRemoval of the Identify function.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of a profile in the NIST CSF 2.0?

   • ATo replace the need for a risk management program.
   • BTo provide a step-by-step implementation guide for each control.
   • CTo align CSF outcomes with the organization's business requirements and risk tolerance.
   • DTo rank the organization against its competitors.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A bank is implementing NIST CSF 2.0. The board of directors wants to ensure that cybersecurity risk management is integrated into the organization's overall enterprise risk management strategy. Which CSF 2.0 function should the bank emphasize to achieve this?

   • ADetect
   • BProtect
   • CIdentify
   • DGovern
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A financial services firm is implementing NIST CSF 2.0. The risk team has developed a Target Profile that includes outcomes from all six functions. However, the board wants to understand how rigorously the firm's risk management practices are currently being executed across the enterprise. Which CSF 2.0 component should the risk team use to communicate this?

   • AThe Categories within the Govern function
   • BThe Implementation Tiers
   • CThe Subcategories under the Protect function
   • DThe Current Profile
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company is transitioning from NIST CSF 1.1 to 2.0. The CISO wants to ensure that the new version's expanded guidance for supply chain risk management is incorporated into their implementation. Which CSF 2.0 component would most directly provide this expanded guidance?

   • AThe Profiles
   • BThe Categories and Subcategories related to supply chain
   • CThe Govern function
   • DThe Implementation Tiers
   Reveal Solution Discussion Select an answer first