Study. uk . com
  1. Home
  2. All questions
  3. Question 12

CISM study material · question 12 of 1000

A mid-sized organisation in a regulated sector has limited capacity to design a Target Profile from scratch. Which CSF resource is intended to serve as its starting point?

  1. The CSF Tiers appendix
  2. The Informative References mapping
  3. The organisation's most recent Current Profile
  4. A Community Profile published as a shared baseline for that sector
Show the answer

Answer: D. A Community Profile published as a shared baseline for that sector

A Community Profile is a baseline of outcomes published for a sector, technology or threat type, and CSF explicitly allows an organisation to adopt one as the basis of its own Target Profile.

Source: NIST CSWP 29 (NIST) — Sec. 3.1 CSF Profiles

Challenge yourself on this topic → Study as cards