212-82: Certified Cybersecurity TechnicianDemo

By ECCouncil · Question Mode

QuestionQ53

Incident and Risk Management

As the IT security manager of a rapidly growing e-commerce company, you want to implement a formal risk management framework to proactively address security risks arising from the company’s swift online expansion. Given your focus on e-commerce and the need for scalability, which risk management framework is most likely the most relevant?

  • A ISO 27001 - Provides a comprehensive information security management system (ISMS).
  • B NIST Cybersecurity Framework (CSF) - Offers a general, customizable approach.
  • C COBIT (Control Objectives for Information and Related Technology) - Focuses on IT governance and control processes.
  • D PCI DSS (Payment Card Industry Data Security Standard) - Targets credit card data security specifically.
Explanation

The NIST Cybersecurity Framework provides a general, risk-based, and customizable structure that organizations can scale as their operations and cybersecurity needs grow. Its flexibility makes it well suited to managing a broad range of security risks during rapid e-commerce expansion.

Community Discussion

No comments yet. Be the first to start the discussion!