A diagnostic from My CISO Partner

How ready are you for NIST CSF 2.0?

A structured readiness assessment across the six Functions of the NIST Cybersecurity Framework 2.0 — Govern, Identify, Protect, Detect, Respond, and Recover. You'll get a maturity score, a per-function breakdown, and your most material gaps in plain language.

Free to run in about 20 minutes — no account needed.

6

core functions

36

evidence-based questions

0–5

maturity scale per domain

25 yrs

enterprise risk behind it

The maturity scale

Every question is scored on the same five-level scale. Answer for how things actually operate today — not the policy on paper. Score the reality, not the intent.

The six functions

Mapped to the NIST Cybersecurity Framework 2.0 (6 Functions · 22 Categories · 106 Subcategories)

Domain 1 of 6

Your results are ready

You've scored all six domains. Enter your email to unlock your maturity score, the domain-by-domain breakdown, and your most material gaps — we'll send a copy to keep.

Your results, plus the occasional note about the toolkit — nothing else, and never shared.

0.0

of 5.0

—

Your NIST CSF 2.0 readiness

Maturity by domain

Where you're strongest — and where the programme is thin.

Domain scores

Averaged across the questions in each domain.

Your most material gaps

The lowest-scoring domains, framed as findings you could take to leadership.

Standards alignment

This assessment maps to the NIST Cybersecurity Framework 2.0. A high-level readiness view — the full subcategory detail lives in the Controls Matrix. The CSF is a voluntary framework; use this as a self-assessment, not a certification.

This is the diagnostic. The toolkit is the fix.

The full NIST CSF Toolkit turns this snapshot into a defensible assessment, a prioritised roadmap, and board-ready deliverables — with expert review available when you want it.

See the toolkit