NIST CSF 2.0

NIST CSF 2.0 is a repeatable framework for ensuring secure practices and compliance in part-of or an entire organization.

Core functions include:

1. Govern (GO) — Strategies, expectations, and policies
2. Identify (ID) — Identify assets and understand risks
3. Protect (PR) — Actions to protect those assets
4. Detect (DE) — Timely discovery and analysis of IOCs and IOAs
5. Respond (RS) — Actions to be taken after an incident is uncovered
6. Recover (RC) — Restoration and communication

Profiles include:

1. Current Profile — Current outcomes that are currently being or attempted to be achieved
2. Target Profile — Desired outcomes
3. Community Profile — A shared baseline across many organizations

The specifics and subcategories are all available within the CSF.