Grasp Core Concepts and Structure of Cybersecurity Framework (CSF) Tiers. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 4)

Questions 16–18

1. 16application · medium

   A manufacturing company is evaluating its cybersecurity posture. Currently, cybersecurity activities are performed informally, and risk management is not consistently applied across the organization. The company wants to move to a tier where cybersecurity risk management is formally documented and approved, and where policies and processes are consistently applied. Which tier should the company target as its next step in the progression?

   • ATier 3: Repeatable
   • BTier 4: Adaptive
   • CTier 2: Risk Informed
   • DTier 1: Partial
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary purpose of CSF Tiers in the NIST Cybersecurity Framework?

   • ATo assign a numerical score that determines the effectiveness of an organization's cybersecurity program
   • BTo characterize how an organization views and manages cybersecurity risk, from informal to adaptive
   • CTo rank an organization's cybersecurity maturity against a universal industry benchmark
   • DTo provide a set of mandatory security controls that all organizations must implement
   Reveal Solution Discussion Select an answer first
3. 18expert · hard

   A multinational corporation is currently at Tier 2 (Risk Informed) for most of its business units, but one business unit that handles highly sensitive data is at Tier 3 (Repeatable). The corporation wants to achieve a consistent target tier across all business units to simplify governance. However, the business units have varying risk tolerances and resource availability. What is the most appropriate approach?

   • AAllow each business unit to maintain its own target tier based on its risk tolerance and business requirements
   • BSet a single target tier of Tier 4 for all business units to maximize security
   • CSet a single target tier of Tier 3 for all business units to ensure consistency
   • DSet a single target tier of Tier 2 for all business units to minimize costs
   Reveal Solution Discussion Select an answer first