Skip to main content
Course

NIST Cybersecurity Framework (CSF 2.0)

Read the framework, then run it: assess where you are and steer where you're going.

Beginner

Level

4

Modules

8

Lessons

4

Graded quizzes

2

Assignments

5 hours

Estimated time

What you will be able to do

  • You will be able to explain what CSF 2.0 is, why it was created, and what changed from version 1.1.
  • You will be able to describe the six Functions (Govern, Identify, Protect, Detect, Respond, Recover) and what each one is responsible for.
  • You will be able to navigate the Core hierarchy of Functions, Categories, and Subcategories to find the outcome you need.
  • You will be able to distinguish Implementation Tiers from Profiles and explain when each one is used.
  • You will be able to build a Current Profile and a Target Profile for a defined scope.
  • You will be able to convert the gap between Current and Target Profiles into a prioritized action roadmap.
  • You will be able to report CSF-based progress and risk to leadership using plain, decision-ready language.

What is inside

4 modules, 8 lessons. Each module ends in a graded quiz and most carry an assignment.

  1. 01

    What CSF Is and Why It Changed

    Understand where the Cybersecurity Framework came from, what it is for, and how CSF 2.0 differs from earlier versions. This module gives you the mental model you'll use for the rest of the course.

    2 lessons · 5 quiz questions

  2. 02

    The Core: Functions, Categories, and Subcategories

    Learn the six Functions in depth and how the Core breaks them into Categories and Subcategories of concrete outcomes. This module builds the structural fluency you need to read CSF and to assess against it.

    2 lessons · 5 quiz questions · assignment

  3. 03

    Tiers and Profiles

    Understand the two tools CSF gives you for describing posture and ambition: Implementation Tiers and Profiles. Learn what Current and Target Profiles are and how Community Profiles fit in.

    2 lessons · 5 quiz questions

  4. 04

    Assess, Roadmap, and Report

    Put the framework to work: build a Current and Target Profile, turn the gap into a prioritized roadmap, and report progress and risk to leadership. This module turns CSF knowledge into a repeatable management cycle.

    2 lessons · 5 quiz questions · assignment