Automate NIST CSF 2.0 controls with AI

Assets are monitored to find anomalies, indicators of compromise, and other potentially adverse events

Anomalies, indicators of compromise, and other potentially adverse events are analyzed to characterize the events and detect cybersecurity incidents

Responses to detected cybersecurity incidents are managed

Investigations are conducted to ensure effective response and support forensics and recovery activities

Response activities are coordinated with internal and external stakeholders as required by laws, regulations, or policies

Activities are performed to prevent expansion of an event and mitigate its effects

Assets (e.g., data, hardware, software, systems, facilities, services, people) that enable the organization to achieve business purposes are identified and managed consistent with their relative importance to organizational objectives and the organization's risk strategy

The cybersecurity risk to the organization, assets, and individuals is understood by the organization

Improvements to organizational cybersecurity risk management processes, procedures and activities are identified across all CSF Functions

Access to physical and logical assets is limited to authorized users, services, and hardware and managed commensurate with the assessed risk of unauthorized access

The organization's personnel are provided with cybersecurity awareness and training so that they can perform their cybersecurity-related tasks

Data are managed consistent with the organization's risk strategy to protect the confidentiality, integrity, and availability of information

The hardware, software (e.g., firmware, operating systems, applications), and services of physical and virtual platforms are managed consistent with the organization's risk strategy to protect their confidentiality, integrity, and availability

Security architectures are managed with the organization's risk strategy to protect asset confidentiality, integrity, and availability, and organizational resilience

Restoration activities are performed to ensure operational availability of systems and services affected by cybersecurity incidents

Restoration activities are coordinated with internal and external parties

The circumstances - mission, stakeholder expectations, dependencies, and legal, regulatory, and contractual requirements - surrounding the organization's cybersecurity risk management decisions are understood

The organization's priorities, constraints, risk tolerance and appetite statements, and assumptions are established, communicated, and used to support operational risk decisions

Cybersecurity roles, responsibilities, and authorities to foster accountability, performance assessment, and continuous improvement are established and communicated

Organizational cybersecurity policy is established, communicated, and enforced

Results of organization-wide cybersecurity risk management activities and performance are used to inform, improve, and adjust the risk management strategy

Cyber supply chain risk management processes are identified, established, managed, monitored, and improved by organizational stakeholders