csf-2-0version 2.0

NIST Cybersecurity Framework 2.0

134 controls.

Reference	Family	Title
PR.PS-02	n/a	Software is maintained, replaced, and removed commensurate with risk
PR.PS-03	n/a	Hardware is maintained, replaced, and removed commensurate with risk
PR.PS-04	n/a	Log records are generated and made available for continuous monitoring
PR.PS-05	n/a	Installation and execution of unauthorized software are prevented
PR.PS-06	n/a	Secure software development practices are integrated, and their performance is monitored throughout the software development life cycle
RC	n/a	RECOVER
RC.CO	n/a	Incident Recovery Communication
RC.CO-03	n/a	Recovery activities and progress in restoring operational capabilities are communicated to designated internal and external stakeholders
RC.CO-04	n/a	Public updates on incident recovery are shared using approved methods and messaging
RC.RP	n/a	Incident Recovery Plan Execution
RC.RP-01	n/a	The recovery portion of the incident response plan is executed once initiated from the incident response process
RC.RP-02	n/a	Recovery actions are selected, scoped, prioritized, and performed
RC.RP-03	n/a	The integrity of backups and other restoration assets is verified before using them for restoration
RC.RP-04	n/a	Critical mission functions and cybersecurity risk management are considered to establish post-incident operational norms
RC.RP-05	n/a	The integrity of restored assets is verified, systems and services are restored, and normal operating status is confirmed
RC.RP-06	n/a	The end of incident recovery is declared based on criteria, and incident-related documentation is completed
RS	n/a	RESPOND
RS.AN	n/a	Incident Analysis
RS.AN-03	n/a	Analysis is performed to establish what has taken place during an incident and the root cause of the incident
RS.AN-06	n/a	Actions performed during an investigation are recorded, and the records' integrity and provenance are preserved
RS.AN-07	n/a	Incident data and metadata are collected, and their integrity and provenance are preserved
RS.AN-08	n/a	An incident's magnitude is estimated and validated
RS.CO	n/a	Incident Response Reporting and Communication
RS.CO-02	n/a	Internal and external stakeholders are notified of incidents
RS.CO-03	n/a	Information is shared with designated internal and external stakeholders
RS.MA	n/a	Incident Management
RS.MA-01	n/a	The incident response plan is executed in coordination with relevant third parties once an incident is declared
RS.MA-02	n/a	Incident reports are triaged and validated
RS.MA-03	n/a	Incidents are categorized and prioritized
RS.MA-04	n/a	Incidents are escalated or elevated as needed
RS.MA-05	n/a	The criteria for initiating incident recovery are applied
RS.MI	n/a	Incident Mitigation
RS.MI-01	n/a	Incidents are contained
RS.MI-02	n/a	Incidents are eradicated

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.