Tool
NIST CSF 2.0 security self-assessment
Thirty questions, about ten minutes, grouped by the six functions of the NIST Cybersecurity Framework 2.0. You get a score for each function, a list of gaps with a specific improvement for each, and the services that match. Your answers stay in your browser.
Answer for your organization as it is today
Choose the answer that is true now, not the one you plan for. Use Not sure when you do not know. It counts as not in place, which is the safe assumption.
This tool runs in your browser and needs JavaScript. Without it, contact us and we will walk through the same questions with you.
The six functions
-
Govern
Context, strategy, roles, policy, oversight and supplier risk. New in version 2.0, and the base for the other five.
-
Identify
Know your assets, your risks and where you need to improve.
-
Protect
Safeguards: access, training, data security, platform security and resilient infrastructure.
-
Detect
Find possible attacks and compromises, through monitoring and analysis of adverse events.
-
Respond
Act on a detected incident: manage, analyze, report, communicate and mitigate.
-
Recover
Restore affected assets and operations, and communicate during recovery.
Questions people ask
Do you see my answers?
No. The assessment runs in your browser and nothing is sent to us unless you choose to copy or download the summary and send it to us.
Is this an audit?
No. It is a self-assessment. It does not verify evidence, and a high score does not mean you are secure.
Why does Not sure count as 0?
If you cannot show a control is in place, you cannot rely on it during an incident. Finding out is usually the first improvement.
What is CSF 2.0?
The NIST Cybersecurity Framework, version 2.0, published in February 2024. It adds the Govern function and is meant for organizations of every size and sector.
What should I do with the result?
Pick the function with the lowest score, read the gaps and fix the cheapest ones first. If you want help, talk to us or read about a NIST CSF assessment.
Related
-
NIST CSF 2.0 assessment
Assess current and target maturity across the six functions of NIST CSF 2.0: Govern, Identify, Protect, Detect, Respond, Recover.
-
Security assessment planner
Answer questions that fit the service you want and get a structured, preliminary scope we can discuss.
-
Find the right security service
Five questions point you to the security services most likely to fit, with the reasons.
Tell us which of these is you
I need a technology project delivered
Describe the system, the change and the timeline. A technical lead replies to talk about scope.
Discuss a projectI need to hire technical talent
Send the role, headcount and start date. A recruiter confirms the details before sourcing starts.
Request talentMy systems may be at risk
Ask for an assessment, a penetration test or help fixing findings. Under attack now? Call.
Speak with a security expert