The six CSF 2.0 Functions one by one: what Govern, Identify, Protect, Detect, Respond and Recover cover, their Categories and outcome counts, what changed from CSF 1.1, and the first actions NIST suggests for each.
What the Govern Function added in CSF 2.0: its six Categories from organizational context to supply chain risk, the 31 outcomes, which CSF 1.1 content moved into it, the new Oversight Category, and how organizations start governing cybersecurity risk.
What the Identify Function covers in CSF 2.0: asset management, risk assessment and the new Improvement Category, its 21 outcomes, and the inventories, data flow records and risk registers NIST suggests as the starting point.
What the Protect Function covers in CSF 2.0: identity and access, training, data security, platform security and infrastructure resilience, its 22 outcomes, how it was reorganized from CSF 1.1, and NIST's first safeguards for small and large organizations.
What the Detect Function covers in CSF 2.0: continuous monitoring and adverse event analysis, its 11 outcomes, the logging and monitoring NIST suggests first, and when a service provider takes on monitoring for a smaller organization.
What the Respond Function covers in CSF 2.0: incident management, analysis, reporting and mitigation, its 13 outcomes, how SP 800-61 Rev. 3 rebuilt incident response guidance around the Functions, and where outside responders fit.
What the Recover Function covers in CSF 2.0: recovery plan execution and recovery communication, its 8 outcomes including those new in 2.0, and the backup integrity checks, stakeholder communication and after-action reports NIST suggests.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.