Study. uk . com
  1. Home
  2. All questions
  3. Question 21

CompTIA Security+ study material · question 21 of 611

How is the Cybersecurity Framework Core structured?

  1. As a maturity ladder from Tier 1 to Tier 4
  2. As a hierarchy of Functions, Categories and Subcategories expressing outcomes
  3. As a set of mandatory technical requirements
  4. As a control catalogue grouped into families
Show the answer

Answer: B. As a hierarchy of Functions, Categories and Subcategories expressing outcomes

The Core is outcome-based. Tiers and control families are different constructs.

Source: NIST CSWP 29 (NIST) — NIST CSF 2.0 § 2 Introduction to the CSF Core

Challenge yourself on this topic → Study as cards