Study. uk . com
  1. Home
  2. All questions
  3. Question 564

CompTIA Security+ study material · question 564 of 611

Why are Cybersecurity Framework outcomes written to be sector-, country- and technology-neutral?

  1. To satisfy international trade agreements
  2. So the framework can be mapped onto whatever control catalogue an organisation already uses
  3. To avoid endorsing any vendor's products
  4. Because outcomes cannot be measured technically
Show the answer

Answer: B. So the framework can be mapped onto whatever control catalogue an organisation already uses

Neutral outcomes let an organisation adopt the framework without abandoning the controls it has already implemented.

Source: NIST CSWP 29 (NIST) — NIST CSF 2.0 › Preface

Challenge yourself on this topic → Study as cards