Assign what needs to be done to who needs to be doing it.

This NIST CSF profile tool show you how to properly assign NIST Cybersecurity Framework 2.0's 363 recommended implementation tasks across 24 roles in your organization, from the Board of directors and CEO, all the way down to the organization's HR and Supply chain managers.

NIST Cybersecurity Framework 2.0 now has 367 tasks mapped to 106 Core Desired Outcomes (cybersecurity capability objectives). Use this roles and responsibilities matrix to assign roles and responsibilities throughout the organization to fulfil NIST CSF 2.0 CORE objectives using the RACI approach. The matrix is presented in a fully editable Microsoft Excel spreadsheet, and should be customized to suit your organization's existing or anticipated organizational structure. Columns defining positions within the organization can be revised, added, or deleted to properly align to your organization's structure. Although the RACI approach has been already applied within the template, please note that these assignments are only "typical" for illustrative purposes, and are not strictly required by CSF 2.0. RACI should be applied to best suit your organization's existing or anticipated organizational structure. Learn more about RACI at https://en.wikipedia.org/wiki/Responsibility_assignment_matrix.

Then assess and audit the completion status of the tasks that have been assigned!

Completion status is also tracked on the Cybersecurity and Infrastructure Security Agency's (CISA) 4-tier maturity scale, which results in a pragmatic all-in-one CSF 2.0 Profile Tool!