NIST CSF 2.0 controls tracker
Work through all 106 Subcategories of the NIST Cybersecurity Framework 2.0 — across the six Functions (Govern, Identify, Protect, Detect, Respond, Recover) — set a status and record where you stand against each. Statuses are free and saved in this browser. Evidence, owners, export and a shareable audit record are kept in the client portal.
0%
conformance
Getting started
Set a status on each item below. Conformant counts fully, partial counts half, and “N/A” items are excluded from the score.
Scope & accuracy. This tracker uses the NIST Cybersecurity Framework 2.0 Subcategory outcomes (a U.S. Government work in the public domain). The CSF is a voluntary framework; status here is a self-assessment to build your Current and Target Profiles, not a certification or audit opinion.