All six CSF 2.0 functions, Govern, Identify, Protect, Detect, Respond and Recover, mapped against the same controls that satisfy your ISMS, BCMS and DSMS. One implementation, every relevant audit answered.
Govern (new in 2.0), Identify, Protect, Detect, Respond, Recover
Cross-mapped to ISO 27001, BSI Grundschutz, NIS2
NIST CSF 2.0 publication year
The NIST Cybersecurity Framework is one of the most widely adopted security frameworks globally. Originally developed for US critical infrastructure, it has become a de facto standard for organisations of all sizes seeking a structured, risk-based approach to cybersecurity.
KaitoSec's multi-framework mapping lets you satisfy NIST CSF subcategories using the same controls that cover ISO 27001 Annex A, BSI IT-Grundschutz and NIS2. Implement once, report across frameworks.
CSF 2.0 elevated governance into a peer function alongside Identify, Protect, Detect, Respond and Recover. KaitoSec's policy and acknowledgement workflows, role assignments and management-review records produce the Govern evidence directly out of the operating ISMS.
Each CSF function shows current and target maturity, the underlying ISMS controls implementing it, and the gap between today and the next assessment. The tracker is the input for management reviews and board briefings.
Build current and target CSF profiles for each part of the organisation. Profiles compare directly against each other and produce a remediation backlog sorted by residual risk, not framework count.
Every CSF subcategory is mapped against the corresponding ISO 27001 control, BSI Grundschutz Baustein and NIS2 measure where the substance overlaps. Implement a control once and watch it light up across four frameworks at the same time.
Built on open catalogs: BSI, MITRE, OWASP, ENISA
Related platform features
KaitoSec