Study. uk . com
  1. Home
  2. All questions
  3. Question 377

CISM study material · question 377 of 1000

A data protection programme addresses data at rest and data in transit. Which two further outcomes does CSF 2.0 name under Data Security? Choose two.

  1. Data classified by its sensitivity level and by its owner in turn
  2. Protection of data in use
  3. Backups created, protected, maintained and tested
  4. Data retained for a defined period
Show the answer

Answer: B. Protection of data in use
C. Backups created, protected, maintained and tested

CSF 2.0's Data Security category covers the confidentiality, integrity and availability of data at rest, in transit and in use, and separately requires backups to be created, protected, maintained and tested.

Source: NIST CSWP 29 (NIST) — Appendix A PR.DS

Challenge yourself on this topic → Study as cards