Cybersecurity

The NIST Cybersecurity Framework (CSF 2.0)

Compliance Assessment Template

banner_norva_

An Excel-native smart Compliance Assessment Template based on hyperlinked authoritative sources, designed to help you produce credible, inspection-ready outputs.

What is NIST Cybersecurity Framework (CSF 2.0)?

Published on February 26, 2024, the new version represents a major update to the CSF—a resource first released in 2014 to help organizations reduce cybersecurity risk. The new NIST Cyber AI Profile Guidance, published on December 16, 2025, is referenced into the CFS 2.0 Template.

CSF 2.0 reflects several major changes, including an expanded scope, the addition of a sixth function, Govern, and improved and expanded guidance on implementing the CSF—especially for creating profiles.

Does the NIST Cybersecurity Framework Template reference the NIST Cyber AI Profile Guidance?

The new NIST Cyber AI Profile Guidance is referenced into the CFS 2.0 Template.

What does the NIST Cybersecurity Framework (CSF 2.0) templates cover? 

The NIST Cybersecurity Framework (CSF 2.0) Template addresses the following functions:

  • GOVERN (GV)
  • IDENTIFY (ID)
  • PROTECT (PR)
  • DETECT (DE)
  • RESPOND (RS), and
  • RECOVER (RC)
The Cyber AI Profile, referenced into the CFS 2.0 template, addresses the following three Focus Areas:
  • Securing AI System Components (Secure): Focuses on identifying cybersecurity challenges when integrating AI into organizational ecosystems and infrastructure
  • Conducting AI-Enabled Cyber Defense (Defend): Focuses on identifying opportunities to use AI to enhance cybersecurity processes and activities, and understanding challenges when leveraging AI to support defensive operations
  • Thwarting AI-Enabled Cyber Attacks (Thwart): Focuses on building resilience to protect against new AI-enabled threat vectors. 

Can I adapt my own compliance materials into a smart Template?

Yes. If you already have compliance materials of your own, you can integrate them into a smart Compliance Template using the included development template. This allows you to supplement NORVA’s Compliance Assessment Templates with your own content while keeping the same practical, structured approach. 

Is my data private and secure?

Yes. All templates are encrypted to protect the privacy and confidentiality of your data. NORVA Solutions does not have visibility into any data you enter in your downloaded template.

 

Back (Small2)