PECB NIS 2 Directive Lead Implementer — Question 7

Has Astral Nexus Power followed all the necessary steps to manage assets in cyberspace in accordance with best practices? Refer to scenario 5.

Answer options

• A. No, the company should also implement appropriate security controls after assessing the risks associated with each asset
• B. Yes, the company has followed all the steps required to manage assets in cyberspace in accordance with best practices
• C. No, the company must also involve external third parties to review and validate its asset management processes

Correct answer: A

Explanation

The correct answer is A because after assessing risks, implementing security controls is essential for effective asset management. Answer B is incorrect as it suggests that all necessary steps have been taken, which is not the case. Answer C, while emphasizing external validation, does not address the immediate need for security controls following risk assessment.