NIST CSF 2.0 cyber posture review

Score 24 practical checks against what is true today. Choose “Not sure” rather than guessing.

Before question 1

What should every answer cover?

NIST CSF 2.0 answers are only meaningful when they all refer to one consistent organisational boundary.

What does the organisation do? *One sentence is enough. This gives the report operating context without identifying the organisation.

What are you assessing? *

Choose the boundary you will use for every score.

The whole organisationAll relevant people, locations, systems, services and operations.A specific partA defined team, service, location or operation with a clear boundary.Scope is not agreedUse this when the boundary is still being decided.

Do not include names, credentials, IP addresses, hostnames or sensitive configuration detail. Your draft remains in this browser tab until submission. See the privacy notice.