We use essential cookies to run this site. Analytics & marketing cookies load only with your consent — see our Cookie Policy and Privacy Policy.

NIST CSF 2.0 · 26 Feb 2024 · 6 functions

CSF 2.0, function by function

One deep guide per function — what each demands, where profiles fall short, and the evidence that holds up. The same functions SEBI's CSCRF is structured on, which is why Indian regulated entities build the profile once and reuse it.

GV
Govern

The function CSF 2.0 added — and put first. Governance moved from a category buried in Identify to the functio

ID
Identify

You cannot protect what you have not enumerated. Identify holds asset management, risk assessment and — new em

PR
Protect

The engineering function: identity and access, awareness, data security, platform security and infrastructure

DE
Detect

Two categories with one question behind them: would you know? Continuous monitoring across networks, endpoints

RS
Respond

Four categories covering the hours that decide breach outcomes: incident management, analysis, communication a

RC
Recover

The shortest function with the most expensive failures: executing recovery plans and communicating during rest

Start with the free assessment, or go to NIST CSF services · SEBI CSCRF.