D-SF-A-24 practice question 2 of 10

Which framework should be recommended to A .R.T.I.E. to enhance the overall security and resilience of their critical infrastructure, and outline methods to reduce their cybersecurity risk?

Full set: 20 questions
Answer options
A: NIST CSF Correct answer
B: COBIT
C: PCIDSS
D: HIPAA
Correct Answer:
A. NIST CSF
Explanation

Based on the case study provided and the requirements for A .R.T.I.E., the most suitable framework to enhance the overall security and resilience of their critical infrastructure, and to outline methods to reduce their cybersecurity risk would be:
A . NIST CSF The NIST Cybersecurity Framework (CSF) is recommended for A .R.T.I.E. to enhance security and resilience. The NIST CSF provides guidelines for organizations to manage cybersecurity risks in a structured and prioritized manner12. Identify: A .R.T.I.E. can use the NIST CSF to identify its digital assets, cybersecurity policies, and the current threat landscape1. Protect: Implement protective technology to ensure that critical infrastructure services are not disrupted1. Detect: Use the framework to implement advanced detection processes to quickly identify cybersecurity events1. Respond: Develop and implement appropriate activities to take action regarding a detected cybersecurity incident1. Recover: Plan for resilience and to restore any capabilities or services that were impaired due to a cybersecurity incident1. The NIST CSF aligns with A .R.T.I.E.'s need for a secure migration to the public cloud and addresses the need for a holistic security capability that ensures security across the organization2. It also supports the Zero Trust model, which is crucial for A .R.T.I.E.'s open platform nature1.

Scroll to Top