The project manager of a data center has a budget of $1,500,000 to install critical infrastructure systems. The project will take 24 months to complete.
The project manager is working with the project management team, security experts, and stakeholders to
identify cyber risks. After reviewing the project plan, the CIO wants to know why so many risk identification meetings are requested.
What a valid reason for the repeated risk identification meetings?
Which NIST Cybersecurity Framework function should be executed before any others?
A new employee is starting work at your company. When should they be informed of the company’s security policy?
You have been tasked with documenting mission critical procedures of an organization that need to be
sustained through a significant disruption.
What document would you develop?
You need to review your current security baseline policy for your company and determine which security
controls need to be applied to the baseline and what changes have occurred since the last update.
Which category addresses this need?