NIST CSF 2.0 · Free readiness checklist

NIST CSF 2.0 Readiness Checklist

Score yourself across the six functions of the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) 2.0, including the Govern function added in 2024, and set a target profile.

22 checks in 6 sections. About 15 min. It opens on this page as soon as you send the form. Last reviewed October 23, 2026.

Get the free checklist

Required

Optional email updates

Your checklist opens on this page right away. See our Privacy Policy for how we use your details.

What this checklist covers

  1. Govern (GV) 6 checks
  2. Identify (ID) 3 checks
  3. Protect (PR) 5 checks
  4. Detect (DE) 2 checks
  5. Respond (RS) and Recover (RC) 4 checks
  6. Profiles and next steps 2 checks

Questions

Who is this checklist for?

Any organization, of any size or sector, that wants a common language for cybersecurity risk. CSF 2.0 is voluntary.

Will this checklist make us compliant or certified?

No. It is a readiness aid that helps you find gaps before you start work with an auditor or assessor. It is general guidance, not legal advice, and it does not know your specific systems.

What happens after I send the form?

The full checklist opens on this page straight away. Your ticks are saved in this browser only, and you can print the checklist or save it as a PDF.

Will you email me?

Only if you tick one of the boxes. We then send one email asking you to confirm your address, and the updates start only after you confirm. You can unsubscribe at any time. Our Privacy Policy explains how we use your details.

This checklist is a general readiness aid, not legal advice. It does not know your specific systems or environment, and completing it does not make an organization compliant or certified. Check obligations that apply to you with qualified counsel.