Certbie
Question 1 of 30
In the context of the NIST Cybersecurity Framework, an organization is assessing its current cybersecurity posture and identifying areas for improvement. The organization has categorized its assets into three groups: critical, important, and non-essential. They have determined that critical assets must have a risk tolerance level of 5 or lower on a scale of 1 to 10, while important assets can have a risk tolerance of up to 7. If the organization identifies that the risk level for its critical assets is currently at 6 and for its important assets at 8, what should be the organization\'s immediate course of action to align with the NIST Cybersecurity Framework\'s guidelines on risk management?
Implement immediate risk mitigation strategies for critical assets to reduce the risk level to 5 or below.
Accept the current risk levels for both critical and important assets as they are within acceptable limits.
Increase the risk tolerance for critical assets to match that of important assets.
Focus solely on improving the risk posture of non-essential assets since they are less critical.

Preparing for CISCO 500-651 Security Architecture for Systems Engineer (SASE)? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free