Study. uk . com
  1. Home
  2. All questions
  3. Question 18

CISM study material · question 18 of 1000

A multinational asks why the CSF can be applied across its operations in several countries and industries without being rewritten for each. What property of the framework explains this?

  1. It is mandated by treaty in every country where it is used
  2. It applies only to information technology, which is identical everywhere
  3. It contains a fixed control list that every sector has agreed to
  4. It states desirable outcomes without prescribing how to achieve them
Show the answer

Answer: D. It states desirable outcomes without prescribing how to achieve them

The CSF describes outcomes an organisation can aspire to rather than prescribing how to reach them, and its taxonomy is sector-, country- and technology-neutral, which is what makes it portable.

Source: NIST CSWP 29 (NIST) — Sec. 1 CSF Overview

Challenge yourself on this topic → Study as cards