Study. uk . com
  1. Home
  2. All questions
  3. Question 731

CISM study material · question 731 of 1000

A recommendation appears against a CSF category rather than a specific subcategory. How does the Community Profile treat it?

  1. It is advisory only and creates no expectation at all on the organisation that happens to be reading the profile
  2. It must be restated at each one of the subcategories beneath it before it takes any effect at all on any of them
  3. It applies only at the level at which it has been written and nowhere at all below that one particular level of the whole profile
  4. It applies to the component elements beneath it, so subcategories inherit guidance from their parents
Show the answer

Answer: D. It applies to the component elements beneath it, so subcategories inherit guidance from their parents

SP 800-61r3 lets guidance written at function or category level reach the elements underneath, so a subcategory inherits what its parent says without it being restated.

Source: NIST SP 800-61 Rev. 3 (NIST) — Sec. 3 CSF 2.0 Community Profile

Challenge yourself on this topic → Study as cards