Match each cybersecurity activity to the NIST Cybersecurity Framework (CSF) function it primarily supports: Activities: - Third-party risk assessment - Staff cybersecurity awareness training - Continuous network anomaly monitoring - Restoration of systems from clean backups Functions: - Identify - Protect - Detect - Recover

### The pairs | Item | Matches | Why | |---|---|---| | Annual third-party cyber risk assessment | Identify and Manage | It evaluates risks associated with external organisations and dependencies. | | Staff cybersecurity awareness programme | Protect | Training helps staff handle information and systems more safely. | | Continuous monitoring for security-configuration changes | Detect | Monitoring can reveal changes that may create weaknesses or indicate suspicious activity. | | Timely threat intelligence | Detect | Current information about threats can inform what the organisation watches for. | ### Terms - **Threat intelligence**: information about threats that helps an organisation understand and respond to them. - **Security configuration**: the settings that determine how a system or device operates and is protected. ### Remember Risk assessment understands exposure; protection applies safeguards; detection looks for signs of trouble.