Study. uk . com
  1. Home
  2. All questions
  3. Question 10

CISM study material · question 10 of 1000

A manager is preparing to use CSF Organizational Profiles for the first time and must explain the difference between the two profile types to the steering group. Which pairing is correct?

  1. A Current Profile records outcomes being achieved now; a Target Profile records the outcomes chosen and prioritised
  2. A Current Profile is held internally for management use; a Target Profile is filed with the regulator as the organisation's public commitment
  3. A Current Profile is for IT; a Target Profile is for the business
  4. A Current Profile lists controls; a Target Profile lists risks
Show the answer

Answer: A. A Current Profile records outcomes being achieved now; a Target Profile records the outcomes chosen and prioritised

The Current Profile describes what the organisation is achieving today, and the Target Profile the outcomes it has selected and prioritised. The gap between them drives the action plan.

Source: NIST CSWP 29 (NIST) — Sec. 3.1 CSF Profiles

Challenge yourself on this topic → Study as cards