Study. uk . com
  1. Home
  2. All questions
  3. Question 116

CISSP study material · question 116 of 500

A team has written both a Current and a Target Profile and asks what comes next in the CSF 2.0 profile cycle. Which step follows?

  1. Reassess the Current Profile after twelve months to confirm drift.
  2. Map every target outcome to an Informative Reference before acting.
  3. Analyse the gap between the two and build a prioritised action plan.
  4. Select a Tier that matches the Target Profile's ambition.
Show the answer

Answer: C. Analyse the gap between the two and build a prioritised action plan.

The cycle runs scope, gather, create, analyse the gap and build a prioritised action plan such as a risk register or milestone plan, then implement and update the profile.

Source: NIST CSWP 29 (NIST) — NIST CSWP 29 > 3.1 CSF Profiles

Challenge yourself on this topic → Study as cards