Study. uk . com
  1. Home
  2. All questions
  3. Question 115

CISSP study material · question 115 of 500

A regional hospital group wants a starting point for its CSF Target Profile that reflects health-sector expectations rather than being built from scratch. Which CSF 2.0 artefact is designed for that?

  1. Tier 3, which supplies sector-specific outcomes.
  2. An Informative Reference mapping to health-sector regulation.
  3. A Community Profile, published as a baseline for a sector or shared use case.
  4. A Current Profile borrowed from a comparable hospital.
Show the answer

Answer: C. A Community Profile, published as a baseline for a sector or shared use case.

A Community Profile is a published baseline for a sector, technology or threat type, and an organisation may take it as the basis of its Target Profile.

Source: NIST CSWP 29 (NIST) — NIST CSWP 29 > 3.1 CSF Profiles

Challenge yourself on this topic → Study as cards