Frameworks / Security / Profiles
NIST Cybersecurity Framework
Included in Information Security · Anchored on ISO/IEC 27001 · Incorporates ISO/IEC 27002, NIST CSF 2.0, SOC 2 (AICPA TSC), CIS Controls, PCI DSS, ISO/IEC 27017, ISO/IEC 27018
Every NIST CSF 2.0 function, category and subcategory as assessable controls, including the new Govern function.
The standard tells you what is required; the framework tells you how to do it, whether you've done enough to certify, and how to keep getting better.
Included in
Information Security
Information Security incorporates NIST CSF 2.0 as a Secondary standard, where the Primary leaves gaps; the profile shows the controls that cite it.
Anchored on ISO/IEC 27001 · Incorporates ISO/IEC 27002, NIST CSF 2.0, SOC 2 (AICPA TSC), CIS Controls, PCI DSS, ISO/IEC 27017, ISO/IEC 27018
A profile isn't sold on its own: it comes with the topic framework, in the Core and Professional editions. In APEX, it is the Certification view filtered to NIST CSF 2.0.
NIST CSF 2.0 also appears in
- Unified Governance Framework, as a Secondary standard
Need to govern against NIST CSF 2.0?
Tell us where your programme is today and we'll point you to the right framework and edition.
Enquire about Information SecurityStandards are referenced by clause, not reproduced. Names of standards and laws are trademarks of their owners; DP Frameworks is not affiliated with or endorsed by any standards body or regulator. Frameworks support governance and readiness; they are not legal advice or a regulatory submission.