During CSF implementation, when is an information security manager MOST likely to identify key enterprise and supporting alignment goals as previously understood?
A.
CSF Steps 5: Create a Target Profile and 6: Determine, Analyze, and Prioritize Gaps
B.
CSF Step 1: Prioritize and Scope
C.
CSF Steps 2: Orient and 3: Create a Current Profile
Correct Answer: B
Explanation:
This CSF step corresponds to the COBIT objective of knowledge and understanding of enterprise goals, because it involves identifying the business drivers, mission, objectives, and risk appetite of the organization, as well as the scope and boundaries of the cybersecurity program 1 2 . This step helps to ensure that the cybersecurity activities and outcomes are aligned with the enterprise goals and strategy 3 4 .
References: 1 : Cybersecurity Framework Components | NIST 2 : Implementing the NIST Cybersecurity Framework Using COBIT 2019 | ISACA 3 : COBIT 2019 Design and Implementation COBIT Implementation 4 : COBIT® 2019 Foundation | Skillsoft Global Knowledge