Get audit-ready for NIST CSF
NIST CSF 2.0 · NIST Cybersecurity Framework
Voluntary framework providing guidance to manage and reduce cybersecurity risk, organized around six core functions.
NIST CSFWhat is NIST CSF?
Voluntary framework providing guidance to manage and reduce cybersecurity risk, organized around six core functions.
Who it applies to
Any organisation, voluntarily. Its real value is as a shared vocabulary — boards, regulators and vendors increasingly describe security posture in its terms, so it is often used to structure a conversation rather than to pass an audit.
How the standard is organised
Organised into high-level Functions, subdivided into categories and subcategories, with the 2.0 revision adding Govern alongside the original identify, protect, detect, respond and recover.
Framework names, marks and abbreviations (ISO, SOC 2, PCI DSS, TISAX, HIPAA, GDPR and others) are trademarks of their respective standards bodies and are used here only to describe what the Bitkosh Readiness Platform helps you track and prepare for. The badges shown are original Bitkosh artwork, not the official marks. Bitkosh Technologies is not affiliated with, sponsored by, or endorsed by ISO, AICPA, the PCI Security Standards Council, ENX/VDA, or any other framework owner, and using this platform does not by itself confer or guarantee certification — certification/attestation is granted only by the relevant accredited third-party body.
NIST CSF on the Bitkosh platform
The 22 NIST CSF controls sit in one workspace with gap assessment, evidence collection and your readiness score, and shared controls count towards the equivalent requirement in the other 47 ready frameworks at the same time — so a second framework costs a fraction of the first.
How the platform worksSample controls
Six controls from the platform's control library, chosen because they are the most specific to this framework.
- PR.PSPlatform Security
Manage hardware, software, services and their configurations in line with risk strategy to protect platform confidentiality, integrity and availability.
Protect - DE.AEAdverse Event Analysis
Analyse anomalies, indicators of compromise and other potentially adverse events to characterise them and detect cybersecurity incidents.
Detect - GV.SCCybersecurity Supply Chain Risk Management
Identify, establish, manage and monitor cyber supply chain risk processes, agreed to by stakeholders across the organisation.
Govern - PR.IRTechnology Infrastructure Resilience
Protect security architectures against unauthorised access and exposure, and manage them to support organisational resilience.
Protect - RC.RPIncident Recovery Plan Execution
Perform restoration activities to ensure operational availability of systems and services affected by cybersecurity incidents.
Recover - GV.OCOrganizational Context
Understand the mission, stakeholders, dependencies and legal requirements that shape cybersecurity risk decisions.
Govern
More information security & cybersecurity frameworks
Frequently Asked Questions
Who publishes NIST CSF, and who does it apply to?
How is NIST CSF conformance demonstrated?
How is NIST CSF structured?
Ready to get audit-ready for NIST CSF?
See how the Bitkosh Readiness Platform gets you audit-ready for NIST CSF — and the other 47 ready frameworks — from a single control library.