Study. uk . com
  1. Home
  2. All questions
  3. Question 11

CISM study material · question 11 of 1000

An organisation has completed both its Current and Target CSF Profiles. What is the next step in the CSF sequence, and what does it produce?

  1. A revision of the Target Profile so that it matches the capability the Current Profile records, closing the gap by lowering it
  2. Publication of both profiles to all suppliers
  3. An immediate reauthorisation of every system the Target Profile touches, so that the chosen outcomes take effect under the existing authorisations
  4. A gap analysis producing a prioritised action plan such as a risk register or plan of action and milestones
Show the answer

Answer: D. A gap analysis producing a prioritised action plan such as a risk register or plan of action and milestones

CSF analyses the gap between Current and Target Profiles to create a prioritised action plan, which may take the form of a risk register, a risk detail report, or a plan of action and milestones.

Source: NIST CSWP 29 (NIST) — Sec. 3.1 CSF Profiles

Challenge yourself on this topic → Study as cards