NIST CSF 2.0 controls tracker
Work through all 106 Subcategories of the NIST Cybersecurity Framework 2.0 — across the six Functions (Govern, Identify, Protect, Detect, Respond, Recover) — set a status and capture your evidence against each. Your progress is saved in this browser. Use it to build your Current Profile and target the gaps that matter most.
0%
conformance
Getting started
Set a status on each item below. Conformant counts fully, partial counts half, and “N/A” items are excluded from the score.
Scope & accuracy. This tracker uses the NIST Cybersecurity Framework 2.0 Subcategory outcomes (a U.S. Government work in the public domain). The CSF is a voluntary framework; status here is a self-assessment to build your Current and Target Profiles, not a certification or audit opinion.