Français: această pagină nu e încă tradusă. Textul de mai jos e în English.
NIST Cybersecurity Framework is not a checklist to tick, but a framework for organising and communicating security. Its power is that it becomes a common language: the same vocabulary for the engineer who implements and the board that approves the budget. We use it to translate your real state into a picture both can understand and base decisions on.
The six functions
CSF 2.0 organises security across six functions: Govern (governance — added in 2.0, precisely because most failures are governance failures, not technical ones), Identify, Protect, Detect, Respond and Recover.
How we work
We establish a current profile (where you are now, honestly) and a target profile (where you want to be, calibrated to your real risk and obligations, not “maximum everywhere”), measure the gap across each function and deliver a prioritised roadmap. Because CSF maps to ISO 27001 and sector requirements, the assessment doesn’t remain an isolated exercise — it becomes the backbone on which you hang the rest of the programme.
What you get
Maturity assessment across the six functions, current profile against target and a prioritised improvement roadmap, with the steps that deliver the greatest risk reduction per unit of effort.