Framework Reference

NIST CSF 2.0 Guidance

Each Function and category below links to a dedicated implementation page with concrete actions, evidence, and metrics.

GV Govern

GV.OC

Organizational Context

Open category guidance

GV.RM

Risk Management Strategy

Open category guidance

GV.RR

Roles, Responsibilities, and Authorities

Open category guidance

GV.PO

Policy

Open category guidance

GV.OV

Oversight

Open category guidance

GV.SC

Cybersecurity Supply Chain Risk Management

Open category guidance

ID Identify

ID.AM

Asset Management

Open category guidance

ID.RA

Risk Assessment

Open category guidance

ID.IM

Improvement

Open category guidance

PR Protect

PR.AA

Identity Management, Authentication, and Access Control

Open category guidance

PR.AT

Awareness and Training

Open category guidance

PR.DS

Data Security

Open category guidance

PR.PS

Platform Security

Open category guidance

PR.IR

Technology Infrastructure Resilience

Open category guidance

DE Detect

DE.CM

Continuous Monitoring

Open category guidance

DE.AE

Adverse Event Analysis

Open category guidance

RS Respond

RS.MA

Incident Management

Open category guidance

RS.AN

Incident Analysis

Open category guidance

RS.CO

Incident Response Reporting and Communication

Open category guidance

RS.MI

Incident Mitigation

Open category guidance

RS.IM

Incident Response Improvements

Open category guidance

RC Recover

RC.RP

Incident Recovery Plan Execution

Open category guidance

RC.CO

Incident Recovery Communication

Open category guidance

RC.IM

Incident Recovery Improvements

Open category guidance

Related References

CIS Controls v8 Guidance FedRAMP Guidance NIST SP 800-171 Requirements NIST SP 800-53 Controls Cybersecurity Glossary