We use essential cookies to run this site. Analytics & marketing cookies load only with your consent — see our Cookie Policy and Privacy Policy.

NIST CSF 2.0 · 26 Feb 2024 · 6 functions

CSF 2.0, function by function

One deep guide per function — what each demands, where profiles fall short, and the evidence that holds up. The same functions SEBI's CSCRF is structured on, which is why Indian regulated entities build the profile once and reuse it.

GV
Govern

The function CSF 2.0 added — and put first. Governance moved from a category buried in Identify to the functio…

ID
Identify

You cannot protect what you have not enumerated. Identify holds asset management, risk assessment and — new em…

PR
Protect

The engineering function: identity and access, awareness, data security, platform security and infrastructure …

DE
Detect

Two categories with one question behind them: would you know? Continuous monitoring across networks, endpoints…

RS
Respond

Four categories covering the hours that decide breach outcomes: incident management, analysis, communication a…

RC
Recover

The shortest function with the most expensive failures: executing recovery plans and communicating during rest…

Start with the free assessment, or go to NIST CSF services · SEBI CSCRF.