NIST Cybersecurity Framework

Target entity: NIST Cybersecurity Framework
Context triple: [Office of the Chief Information Security Officer of GSA, followsFramework, NIST Cybersecurity Framework]

• A. NIST SP 800 series
  The NIST SP 800 series is a collection of special publications from the U.S. National Institute of Standards and Technology that provide guidelines, recommendations, and technical specifications for information security and risk management.
• B. National Cybersecurity Protection System
  The National Cybersecurity Protection System is a U.S. federal program that provides intrusion detection, prevention, and other security capabilities to help protect government networks from cyber threats.
• C. New York State Department of Financial Services Cybersecurity Regulation
  The New York State Department of Financial Services Cybersecurity Regulation is a pioneering set of cybersecurity requirements for financial institutions operating in New York, mandating robust risk-based programs, incident reporting, and governance to protect consumers and the financial system from cyber threats.
• D. Cybersecurity Information Sharing Act of 2015
  The Cybersecurity Information Sharing Act of 2015 is a U.S. federal law that facilitates the sharing of cyber threat information between private companies and the government to improve national cybersecurity while addressing privacy and civil liberties concerns.
• E. Federal Information Processing Standards
  Federal Information Processing Standards are publicly announced, U.S. government–wide standards that define requirements for information security, data formats, and interoperability in federal computer systems.
• F. None of above. chosen
• G. Unsure - the case is ambiguous/there is not enough information to decide.

Target entity: NIST Cybersecurity Framework
Target entity description: The NIST Cybersecurity Framework is a widely adopted set of guidelines and best practices designed to help organizations manage and reduce cybersecurity risk through a structured, risk-based approach.

• A. NIST SP 800 series
  The NIST SP 800 series is a collection of special publications from the U.S. National Institute of Standards and Technology that provide guidelines, recommendations, and technical specifications for information security and risk management.
• B. National Cybersecurity Protection System
  The National Cybersecurity Protection System is a U.S. federal program that provides intrusion detection, prevention, and other security capabilities to help protect government networks from cyber threats.
• C. New York State Department of Financial Services Cybersecurity Regulation
  The New York State Department of Financial Services Cybersecurity Regulation is a pioneering set of cybersecurity requirements for financial institutions operating in New York, mandating robust risk-based programs, incident reporting, and governance to protect consumers and the financial system from cyber threats.
• D. Cybersecurity Information Sharing Act of 2015
  The Cybersecurity Information Sharing Act of 2015 is a U.S. federal law that facilitates the sharing of cyber threat information between private companies and the government to improve national cybersecurity while addressing privacy and civil liberties concerns.
• E. Federal Information Processing Standards
  Federal Information Processing Standards are publicly announced, U.S. government–wide standards that define requirements for information security, data formats, and interoperability in federal computer systems.
• F. None of above. chosen