Explain GOVERN Function Categories and Subcategories. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 7)

Questions 31–33

1. 31foundation · easy

   In the NIST Cybersecurity Framework 2.0, what is the primary purpose of the GOVERN function?

   • ATo recover assets and operations affected by a cybersecurity incident
   • BTo establish and communicate the organization's cybersecurity risk management strategy, expectations, and policy
   • CTo detect cybersecurity events and anomalies through continuous monitoring
   • DTo respond to and contain the impact of cybersecurity incidents
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the purpose of continuous improvement of cybersecurity governance processes?

   • ATo reduce the number of cybersecurity policies to the minimum
   • BTo adapt to changes in the threat landscape, business environment, and lessons learned
   • CTo ensure that the governance processes never change
   • DTo guarantee that all cybersecurity risks are eliminated
   Reveal Solution Discussion Select an answer first
3. 33expert · hard

   A company's mission is to provide low-cost financial services to underserved communities. To keep costs low, the company operates with a very lean IT budget. A new regulation requires the company to implement stronger customer authentication, which will increase costs. The company's risk appetite is low, but its financial constraints are severe. What should the company do?

   • ADelay implementation until the company can secure additional funding, even if it means temporary non-compliance.
   • BTransfer the risk to customers by requiring them to sign a waiver accepting the risk of weaker authentication.
   • CImplement the required authentication controls and adjust the business model to absorb the cost, as legal compliance is non-negotiable.
   • DImplement a cheaper, less secure authentication method and argue that the regulation is too costly.
   Reveal Solution Discussion Select an answer first