Question $13$ of $30$

$-/3\mathrm{.}34$

Current Attempt in Progress

Nolls is an online retailer that specializes in connecting local artisans directly to consumers. You work for a public accounting firm as IT audit consultant and have been staffed on the Nolls cybersecurity engagement. Nolls hired your firm to help implement the NIST Cybersecurity Framework. Your team is performing a gap analysis to identify areas where Nolls lacks internal controls, and you have been tasked with mapping Nolls' existing internal controls to specific NIST control families.

Use the word bank to identify the NIST family in which each of the following internal controls belongs.

Word Bank:

Physical and Environmental Protection

Awareness and Training

Personnel Security

Access Control

Identification and Authentication

Configuration Management

Risk Assessment

System and Communications.Protection

System and Information Integrity

Security Assessment and Authorization

Internal controls:

The Human Resources and IT departments collaborate to provide annual training about phishing emails.

Nolls' IT department conducts penetration testing on an annual basis.

MacBook Air