The tooling side of NIST CSF 2.0: open-source tools that deliver and evidence CSF outcomes, self-hosted GRC software, NIST's informative references and Reference Tool, and the mapping to CIS Controls.
Self-hosted open-source tools mapped to the CSF 2.0 Functions: Keycloak for identity and MFA, Wazuh for detection and inventory, Greenbone for vulnerability scanning, DFIR-IRIS for incident handling, restic for backups and CISO Assistant for governance.
Running NIST CSF assessments in self-hosted GRC software instead of spreadsheets: what CISO Assistant and eramba Community offer, their license limits, and when NIST's free Profile template or CSET is enough.
How NIST CSF 2.0 maps to SP 800-53, ISO 27001, PCI DSS, SP 800-171, CIS Controls and the CSA CCM: what informative references are, how much of the Core each standard covers in NIST's Reference Tool, and why mappings are not equivalence.
Using CIS Controls v8.1 to implement NIST CSF 2.0: how many CSF outcomes the official mapping covers, how CIS's own navigator links Safeguards to CSF and SP 800-53, where the Implementation Groups fit, and what the mapping leaves to governance.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.