NIST Cybersecurity Framework (CSF) 2.0

Categories

Asset Management (ID.AM):

Assets (e.g., data, hardware, software, systems, facilities, services, people) that enable the organization to achieve business purposes are identified and managed consistent with their relative importance to organizational objectives and the organization's risk strategy

Risk Assessment (ID.RA):

The cybersecurity risk to the organization, assets, and individuals is understood by the organization

Improvement (ID.IM):

Improvements to organizational cybersecurity risk management processes, procedures and activities are identified across all CSF Functions

Business Environment (ID.BE):

[Withdrawn: Incorporated into GV.OC]

Governance (ID.GV):

[Withdrawn: Incorporated into GV]

Risk Management Strategy (ID.RM):

[Withdrawn: Incorporated into GV.RM]