フリー問題

問題文

A small utility cannot afford an external assessor and concludes that it therefore cannot measure its cybersecurity state at all. What does the Framework say about how such measurement may be obtained?

選択肢

1. It can proceed with internally conducted assessment, because the Framework accepts either route provided the enterprise keeps acknowledged measurement limitations in view during implementation.
2. It can proceed with individual identification implications, because the Framework accepts either route provided the enterprise keeps acknowledged measurement limitations in view during implementation.
3. It can proceed with individual identification implications, because the Framework accepts either route provided the enterprise keeps fixed reporting deadlines in view during implementation.
4. It can proceed with internally conducted assessment, because the Framework accepts either route provided the enterprise keeps fixed reporting deadlines in view during implementation.