Study. uk . com
  1. Home
  2. All questions
  3. Question 22

CompTIA Security+ study material · question 22 of 611

An organisation builds a current Profile and a target Profile using the Cybersecurity Framework. What does comparing them produce?

  1. The system's authorisation boundary
  2. The organisation's Tier rating
  3. The prioritised gap list to work from
  4. A compliance certificate
Show the answer

Answer: C. The prioritised gap list to work from

Comparing where the organisation is against where it wants to be is what surfaces the gaps to fund and fix.

Source: NIST CSWP 29 (NIST) — NIST CSF 2.0 § 3 Profiles and Tiers

Challenge yourself on this topic → Study as cards