Study. uk . com
  1. Home
  2. All questions
  3. Question 128

CISSP study material · question 128 of 500

A programme schedules Govern, Identify, Protect, Detect, Respond and Recover as six sequential annual workstreams. Why does this conflict with CSF 2.0?

  1. Only Govern is continuous; the remaining five are periodic.
  2. The Functions must be completed in reverse order, starting from Recover.
  3. Functions are assigned to Tiers, so only some apply at any one time.
  4. Govern, Identify, Protect and Detect run continuously, while Respond and Recover are kept ready and run when an incident occurs.
Show the answer

Answer: D. Govern, Identify, Protect and Detect run continuously, while Respond and Recover are kept ready and run when an incident occurs.

CSF 2.0 has the Functions addressed concurrently: four run continuously, while Respond and Recover must be ready at all times and are exercised when incidents occur.

Source: NIST CSWP 29 (NIST) — NIST CSWP 29 > 2. Introduction to the CSF Core

Challenge yourself on this topic → Study as cards