Classify Digital Risks With NIST CSF

Place each risk into the NIST CSF function it most directly represents. Govern Identify Protect Detect Respond Recover No named owner for approving vendor access exceptions. The team has not mapped which customer data fields the workflow stores. Admin access is shared by three contractors. No alert fires when bulk exports run after hours. No one knows who leads communication if the integration leaks data. There is no rollback plan if identity sync locks users out. The data dependency on the legacy CRM is undocumented. The vendor account does not use multi-factor authentication.

Sign up free — one personalized lesson every day, matched to your role and goals.

Already have an account? Sign in