skills.rest
UnitOneAI
UnitOneAIOFFICIAL
Explore all skills by this author →
WebsiteGitHub

nist-csf-assessment

Evaluate all CSF 2.0 functions, categories, and subcategories with tier-based maturity scoring.

44|128|Updated Mar 6, 2026
Search Tags:#gap analysis#compliance mapping#risk posture#nist csf 2.0#cybersecurity maturity#organizational profile#prioritized roadmap
One-click install
npx skills add https://github.com/UnitOneAI/SecuritySkills --skill nist-csf-assessment-unitoneai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: nist-csf-assessment
Source: https://github.com/UnitOneAI/SecuritySkills/tree/main/skills/compliance/nist-csf-assessment
Command: npx skills add https://github.com/UnitOneAI/SecuritySkills --skill nist-csf-assessment-unitoneai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It turns an organization’s cybersecurity program into a structured, auditable NIST Cybersecurity Framework (CSF) 2.0 maturity assessment, so leadership can understand current capability, define target outcomes, and prioritize improvements with defensible mappings.

Core Features & Use Cases

  • CSF 2.0 function-by-function assessment: Evaluates all six CSF 2.0 functions—GOVERN, IDENTIFY, PROTECT, DETECT, RESPOND, and RECOVER—down to categories and subcategories.
  • Organizational profile development (current vs target): Builds current-state and target-state profiles aligned to CSF 2.0 terminology, including governance and supply chain coverage.
  • Tier-based maturity scoring and gap analysis: Scores subcategories on a 0–4 scale aligned to CSF tiers, then produces quantified gaps and a prioritized roadmap.
  • Informative references mapping: Produces implementation guidance cross-referenced to CSF 2.0 subcategories and aligned implementation standards (e.g., NIST SP 800-53, ISO 27001, CIS Controls).

Quick Start

Ask the AI agent to run a NIST CSF 2.0 assessment for an enterprise-wide scope using your mission, critical services, regulatory requirements, stakeholders, and current evidence artifacts.

Frequently Asked Questions about nist-csf-assessment

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I conduct a NIST CSF 2.0 gap analysis for my organization?▼

A NIST CSF 2.0 gap analysis evaluates all six functions—GOVERN, IDENTIFY, PROTECT, DETECT, RESPOND, and RECOVER—down to subcategories, scoring maturity on a 0–4 tier scale to quantify gaps and build a prioritized remediation roadmap.

What is a NIST CSF organizational profile and how does it work?▼

A NIST CSF organizational profile maps current-state and target-state cybersecurity capabilities against CSF 2.0 categories, enabling leadership to define target outcomes and prioritize improvements with defensible mappings.

How do I score cybersecurity maturity using the NIST CSF tiers?▼

NIST CSF tier-based scoring assigns a 0–4 maturity scale to each subcategory, evaluating risk posture and governance practices to produce quantified gaps and an improvement roadmap aligned to organizational objectives.

Can I map NIST CSF 2.0 subcategories to ISO 27001 and NIST SP 800-53?▼

Yes, NIST CSF 2.0 assessments produce informative references that cross-reference subcategories to aligned implementation standards including NIST SP 800-53, ISO 27001, and CIS Controls for implementable actions.

Does this NIST CSF assessment enforce valid CSF 2.0 function and category IDs?▼

Yes, the assessment enforces real CSF 2.0 function, category, and subcategory ID usage, treating any user-supplied IDs as invalid if they fall outside official CSF 2.0 numbering to ensure accurate compliance mapping.

What inputs do I need to run a NIST CSF 2.0 maturity assessment?▼

Running a NIST CSF 2.0 assessment requires providing your organizational mission, critical services, regulatory requirements, stakeholders, and current evidence artifacts for an enterprise-wide scope evaluation.

Related Skills

Explore More Legal & Compliance Skills→
daemon-blockint-techdaemon-blockint-tech
7

mission-critical

Tier mission-critical systems by availability, integrity, and continuity objectives.

Community
Advanced
musher-devmusher-dev

scoring-schema-maturity

Score PostgreSQL schemas against a 5-level maturity model with diagnostic questions.

Official
Advanced
GhostPWNGhostPWN
4

GRC & Compliance

Analyze governance, risk, and compliance requirements into scored risk registers and control mappings.

Official
Advanced
levicarloszlevicarlosz
2

nist-csf

Assess cybersecurity gaps and map frameworks against NIST CSF structures.

Community
Advanced