VOLUNTARY CYBERSECURITY FRAMEWORK

NIST Cybersecurity Framework 2.0

A six-function framework for describing current and target cybersecurity outcomes.

Who it reaches

Any organisation. CSF 2.0 was published by NIST on 26 February 2024 and is voluntary. It has six functions: Govern, Identify, Protect, Detect, Respond, Recover. UK companies meet it when a US parent, investor or customer asks for a CSF profile, and when a board wants a plain-language picture of the security programme.

What Goldline does

A current profile and a target profile against the six functions, mapped to the ISO 27001 Annex A controls the company already runs or is building, so the CSF answer and the ISO system are one set of evidence.

Who issues the outcome

Nobody. CSF has no certificate.

How it fits with ISO 27001

Delivered inside an ISO 27001 programme or as a readiness assessment.

What it costs

Scoped on the diagnostic. Any third-party fee is paid direct.

Scoped on the diagnostic

Discuss how this framework reaches your organisation

Bring the contract, questionnaire or buyer request. The diagnostic establishes the scope and the evidence route.

Book the Free Diagnostic