Câu 13: NIS 2 Directive Lead Implementer: PECB Certified NIS 2 Directive Lead Implementer

According to scenario 2, as a first step toward the NIS 2 Directive implementation, MHospital decided to conduct a gap analysis to assess its current state of the cybersecurity measures against the requirements outlined in the NIS 2 Directive. Is this in alignment with best practices?

1. A. Yes, a gap analysis should be initially conducted before taking any further actions to implement the Directive — đáp án hiện tại
2. B. No, the initial step should have been a risk assessment to identify potential cybersecurity vulnerabilities
3. C. No, the initial step should have been a scop assessment to determine the scope of the company’s compliance