Framework
NIST CSF 2.0
Published February 2024. Adds the Govern function to the original five. A pragmatic, outcome-based framework that's particularly common in US public-sector and supply-chain conversations.
The six functions
- Govern (GV) — strategy, oversight, expectations.
- Identify (ID) — assets, business environment, risk assessment.
- Protect (PR) — access control, awareness, data security, secure development.
- Detect (DE) — anomalies, monitoring, detection processes.
- Respond (RS) — response planning, communications, mitigation.
- Recover (RC) — recovery planning, improvements, communications.
What Argitron delivers
CSF subcategories map to the same underlying control library as ISO 27001. Argitron generates the CSF profile (current vs. target tier) and the gap-closure workflow. Common pairing for public-sector procurements that ask for CSF + 27001 evidence.
Stop stitching three vendors together to pass an audit.
Free under 25 assets, forever. No credit card. No sales call. Production use OK.