- Home
- Compliance
- NIST CSF 2.0
Standard compliance
NIST CSF 2.0
NIST CSF 2.0 gives leadership a clear, outcome-based view of cybersecurity. We assess your current profile against all six functions — including the new Govern function — and define a realistic target state.
Why teams choose Adiroha
- Led by CISA and ISO 27001 lead auditors
- Clear scope, roadmap and timeline before we start
- Evidence organised in the Cydital platform
- Support through the external audit and beyond
Scope
What we cover
- Current-profile assessment across all six functions
- Govern function: strategy, roles, risk and supply chain
- Target profile aligned to business risk
- Gap prioritisation and investment planning
- Mapping to ISO 27001 and other frameworks
- Board-level reporting
Deliverables
What you receive
- Current vs target profile
- Prioritised roadmap
- Board summary
- Framework cross-mapping
How we work
Discover. Assess. Remediate. Validate.
Discover
Understand your business, scope, stakeholders and the obligations that actually apply to you.
Assess
Gap assessment against the framework or regulation, turned into a prioritised, costed roadmap.
Remediate
Implement policies, controls and evidence with your teams, tracked in Cydital.
Validate
Internal audit before the external one, audit-day support, and continuous compliance after.
FAQ
Common questions
What's new in CSF 2.0?
Published in 2024, CSF 2.0 added the Govern function and broadened the framework's scope to organisations of all sizes and sectors.
Is NIST CSF a certification?
No. It's a voluntary framework used to measure and communicate cybersecurity maturity.
Should we use NIST CSF or ISO 27001?
They complement each other. ISO 27001 is certifiable and widely requested by customers; NIST CSF is excellent for measuring maturity and reporting to leadership.
Who uses NIST CSF in India?
Organisations with US customers or parents, critical infrastructure operators, and companies that want an outcome-based maturity model.
How often should we reassess?
Annually, so you can track progress against your target profile and adjust priorities.
Related
Related services
Cloud Security Audit
Independent cloud security audit against CSA Cloud Controls Matrix, CIS Benchmarks and your compliance obligations.
Learn moreIS Audit (RBI)
IS audits for banks, NBFCs and other RBI-regulated entities, aligned to the RBI Master Direction on IT governance and assurance.
Learn moreIRDAI Compliance Audit
Information and cyber security audits for insurers and intermediaries under the IRDAI Information and Cyber Security Guidelines.
Learn moreTalk to a specialist about NIST CSF 2.0.
A free 30-minute consultation to understand your scope and timeline. We follow up with a fixed proposal.