NIST CSF Community Profiles

Ready-made CSF 2.0 baselines for specific threats and technologies: the ransomware and incident response profiles, the draft Cyber AI Profile, and how organizations build or adopt a Community Profile as their target.

NIST CSF ransomware profile (IR 8374 Rev. 1)

How to use NIST's CSF 2.0 ransomware Community Profile: what the June 2026 final IR 8374 Rev. 1 covers, using it to assess defenses and build a countermeasure playbook, and the backup and recovery outcomes that matter most.

NIST incident response profile: SP 800-61 Rev. 3

What changed when NIST rebuilt its incident response guidance as a CSF 2.0 Community Profile: the April 2025 SP 800-61 Rev. 3, the new life cycle model based on the six Functions, the CPRT resources and who should use it.

NIST Cyber AI Profile for securing AI systems

What NIST's draft Cyber AI Profile (IR 8596) means for organizations running AI systems: its status and timeline, the Secure, Defend and Thwart focus areas, how CSF 2.0 already applies to AI, and the OWASP LLM mapping in NIST's Reference Tool.

Creating or adopting a NIST CSF Community Profile

When to adopt an existing NIST CSF Community Profile and when to write one: what Community Profiles are, who publishes them, NIST's draft guide to creating them, and how one becomes an organization's Target Profile.

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.