- Home
- All questions
- Question 843
CISM study material · question 843 of 1000
Which two CSF functions does NIST say should be kept ready at all times and invoked when an incident occurs, rather than running continuously?
Show the answer
Answer: A. Respond and Recover
CSF 2.0 has Govern, Identify, Protect and Detect run continuously, while Respond and Recover sit ready and are called on when an incident actually occurs.
Source: NIST CSWP 29 (NIST) — Sec. 2 Introduction to the CSF Core