Two companies are in the process of merging. The companies need to decide how to standardize their information security programs. Which of the following would best align the security programs?

The correct answer is C. Both companies following the same CSF. A Cybersecurity Framework (CSF) provides a structured approach to standardizing and aligning security programs across different organizations. By both companies adopting the same CSF, they can ensure that their security measures, policies, and practices are consistent, which is…

Submitted by katya_ua· Mar 6, 2026Security program management and oversight

Question

Options

AShared deployment of CIS baselines
BJoint cybersecurity best practices
CBoth companies following the same CSF
DAssessment of controls in a vulnerability report

How the community answered

(35 responses)

A
3% (1)
B
11% (4)
C
80% (28)
D
6% (2)

Explanation

A Cybersecurity Framework (CSF) provides a structured approach to standardizing and aligning security programs across different organizations. By both companies adopting the same CSF, they can ensure that their security measures, policies, and practices are consistent, which is essential during a merger when aligning two different security programs.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice