Study. uk . com
  1. Home
  2. All questions
  3. Question 728

CISM study material · question 728 of 1000

How is SP 800-61r3 structured in relation to CSF 2.0?

  1. As a mapping of CSF outcomes to control identifiers
  2. As a replacement for the CSF Core for incident response
  3. As an appendix to the CSF listing additional subcategories
  4. As a CSF 2.0 Community Profile for cyber incident risk management, ranking each CSF outcome by priority for incident response
Show the answer

Answer: D. As a CSF 2.0 Community Profile for cyber incident risk management, ranking each CSF outcome by priority for incident response

SP 800-61r3 is written as a Community Profile for cyber incident risk management, taking the CSF Core and marking which outcomes matter most for incident response.

Source: NIST SP 800-61 Rev. 3 (NIST) — Sec. 3 CSF 2.0 Community Profile

Challenge yourself on this topic → Study as cards