Study. uk . com
  1. Home
  2. All questions
  3. Question 130

CISSP study material · question 130 of 500

Under CSF 2.0, which category sits within the Identify Function and carries the work of feeding lessons learned back into the programme?

  1. Asset Management.
  2. Improvement.
  3. Oversight.
  4. Risk Assessment.
Show the answer

Answer: B. Improvement.

Identify holds Asset Management, Risk Assessment and Improvement. Improvement covers finding better ways to run policies, plans, processes and practices. Oversight sits under Govern.

Source: NIST CSWP 29 (NIST) — NIST CSWP 29 > Appendix A, Table 1

Challenge yourself on this topic → Study as cards