Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Cyber Security

An internal auditor reviews a firm's security programme. The firm has a written information security policy, a vulnerability scanner, and an incident response plan, but has never tested restoring from backups and has no record of which assets are critical. Mapping the gaps to the NIST CSF 1.1 core functions, which pair of functions is most directly deficient?

Identify and Recover are the deficient functions. Lacking a record of critical assets is an asset management weakness under Identify, and never testing backup restoration leaves recovery unproven under Recover. The scanner, incident response plan and policy already address Detect, Respond and Protect respectively.

  1. AIdentify and RecoverCorrect
  2. BDetect and Respond
  3. CProtect and Detect
  4. DRespond and Identify only because no policy exists

Explanation

Not knowing which assets are critical is an Asset Management gap under Identify. Never testing backup restoration means recovery capability is unproven, a gap under Recover. The scanner supports Detect, the incident plan supports Respond, and the policy supports Protect and governance, so the other pairs mismatch the facts.

Did you get it right without looking?

One question tells you little. A timed set on Cyber Security shows your real accuracy, how long you take and where you lose marks.

Practise Cyber SecurityFree diagnostic mock

More Cyber Security questions