Complass
NIST CSF 2.0: a profile that customers and insurers understand
The US customer asks for the "CSF profile", the insurer for the tier. How companies in any sector build one answer from it.
The NIST Cybersecurity Framework 2.0 describes cybersecurity outcomes in six functions, 22 categories and 106 subcategories. It is voluntary, sector-agnostic and not certifiable; an organisational profile describes the current state and the target, and the action plan arises from the gap between them.
The whitepaper explains structure, profiles and tiers, the link to ISO 27001, IEC 62443 and NIS2 and, for companies with plants, OT security under NIST SP 800-82 Rev. 3, with a 10-step plan and a practice example.
9 pages · Version 1.1 · as of · Author Marc Linden, Complass GmbH
Try Complass with your own data
Set up your trial yourself, with a sample project per framework if you like. If you would rather see Complass first, request a demo.