NIST CSF 2.0
The NIST Cybersecurity Framework 2.0 provides a taxonomy of high-level cybersecurity outcomes that can be used by any organization to better understand, assess, prioritize, and communicate its cybersecurity efforts.
Framework Requirements & Categories
Detailed breakdown of the highly precise, accurate control domains defined by NIST CSF 2.0.
GV.OC: Organizational Context
The circumstances mission, stakeholder expectations, legal, regulatory, and contractual requirements surrounding the organization's cybersecurity risk management decisions are understood.
GV.RM: Risk Management Strategy
The organization's priorities, constraints, risk tolerance and appetite statements, and assumptions are established, communicated, and used to support operational risk decisions.
GV.PO: Roles, Responsibilities, and Authorities
Cybersecurity roles, responsibilities, and authorities to foster accountability, performance assessment, and continuous improvement are established and communicated.