Study. uk . com
  1. Home
  2. All questions
  3. Question 127

CISSP study material · question 127 of 500

A manufacturer argues that CSF 2.0 cannot apply to its plant floor because the framework was written for office information technology. What does CSF 2.0 actually say about its scope?

  1. The Core applies to any technology categorised at moderate impact or above.
  2. The Core applies to operational technology only where a Community Profile exists for the sector.
  3. The Core applies to information technology only; operational technology is covered by a separate profile.
  4. The Core applies to all information and communications technology, naming operational technology and the Internet of Things as well as cloud, mobile and artificial intelligence environments.
Show the answer

Answer: D. The Core applies to all information and communications technology, naming operational technology and the Internet of Things as well as cloud, mobile and artificial intelligence environments.

CSF 2.0 states the Functions, Categories and Subcategories apply to all information and communications technology, explicitly including operational technology and the Internet of Things.

Source: NIST CSWP 29 (NIST) — NIST CSWP 29 > 2. Introduction to the CSF Core

Challenge yourself on this topic → Study as cards