NIST CSF
with ComplyEncrypt
The NIST Cybersecurity Framework (CSF) 2.0, published by the US National Institute of Standards and Technology in February 2024, is voluntary guidance for managing cybersecurity risk. It organizes outcomes into six Core Functions: Govern, Identify, Protect, Detect, Respond and Recover.
Not available to buy yet. No launch date or price has been announced.
Who this is for
Organizations of any size, especially those serving US customers or running NIST-aligned security programs
Many customers describe security expectations in NIST terms, while auditors ask about ISO 27001 controls. Running two separate programs doubles the work; mapping one onto the other shows where existing controls already deliver the outcome.
The requirements
What NIST CSF asks of your organization
Govern and Identify
Set cybersecurity strategy, roles, policy and supply-chain risk oversight, and understand assets, risks and improvement needs.
Protect and Detect
Safeguard identities, data and platforms, and monitor for anomalies and potential attacks.
Respond and Recover
Manage, analyse and communicate incidents, then restore affected assets and operations.
The planned ComplyEncrypt pathway
A structured approach to cybersecurity framework 2.0
The roadmap pathway is intended to provide structured guides showing how each CSF 2.0 Core Function aligns with ISO 27001 clauses and Annex A control sets, with current and target profiles and a single gap view across both. It is not available to buy yet.
Intended documentation scope
- Current and target CSF profiles
- Core Function to ISO 27001 control mapping
- Cybersecurity and supply-chain risk records
- Improvement plan and progress tracking
Your team remains accountable
The roadmap describes intended functionality, not a currently available module. Documents must reflect your real processes. Your team implements controls, verifies evidence and manages ongoing obligations.
NIST CSF is voluntary guidance with no certification scheme. ComplyEncrypt does not certify conformance or guarantee any customer or regulatory outcome.
On the roadmap
Interested in buying NIST CSF?
Tell us about your organization and purchase interest. This is an enquiry, not an order, payment or reservation.
Related frameworks
See the product in action.
A 2-minute walkthrough of what you get the moment you buy a framework.