NIST-COBIT-2019 practice question 1 of 10
How should gaps identified between the current and target profiles be addressed?
Full set: 50 questionsCorrect Answer:
C. Through a risk based-approach
Explanation
According to the NIST Cybersecurity Framework, gaps identified between the current and target profiles should be addressed through a risk-based approach, which enables an organization to gauge the resources needed and prioritize the mitigation of gaps in a cost-effective manner. This approach also aligns the cybersecurity program with the business objectives and risk appetite of the organization12. Reference Examples of Framework Profiles | NIST What is the NIST Cybersecurity Framework? | IBM
Keep practicing
Take the free NIST-COBIT-2019 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other NIST-COBIT-2019 practice questions
- Question 2Combining CSF principles with COBIT 2019 practices helps to ensure value, manage risk, an…
- Question 3What does a CSF Informative Reference within the CSF Core provide?
- Question 4Which of the following COBIT tasks and activities corresponds to CSF Step 1: Prioritize a…
- Question 5Which of the following COBIT and NIST implementation steps may be reversed depending on t…
- Question 6The CSF Implementation Tiers distinguish three fundamental dimensions of risk management …
- Question 7During CSF life cycle action plan review, which of the following tasks is associated with…