NIST CSF 2.0 assessment

NIST CSF 2.0 assessment, scored on your own evidence

Benchmark cyber maturity across all six Functions of CSF 2.0, including Govern, using the documents and data you already hold rather than a workshop full of opinions.

From $59 per seat / month, after a 7-day free trial. CSF is a voluntary framework, so there is no certificate at the end, only a defensible maturity picture.

The problem

Where CSF assessments go wrong

Scored on opinion, not evidence

A workshop where people self-rate their own function produces a flattering number nobody can defend to a board.

Govern is the new gap

CSF 2.0 added Govern as a Function in its own right, and it is the one most existing assessments have nothing to say about.

No way to show movement

A one-off score is a snapshot. Without a repeatable method, next year's number is not comparable to this year's.

How Celeredge helps

All six Functions, scored the same way twice

Celeredge assesses Govern, Identify, Protect, Detect, Respond and Recover from the evidence you supply, bands the result, and keeps the method fixed so a re-run is genuinely comparable.

  • All six CSF 2.0 Functions, including Govern
  • Every score traceable to the evidence behind it
  • Gaps ranked by severity to drive the improvement plan
  • Re-runnable on a schedule, so the trend is real rather than re-scored
NIST CSF framework →
NIST CSF 2.0 assessment, scored on your own evidence in Celeredge

Questions

NIST CSF 2.0 assessment FAQ

Is there a NIST CSF certification?

No. CSF is a voluntary framework, not a certifiable standard. The output is a maturity and gap picture, which is exactly why the evidence trail behind each score matters so much.

Does it cover CSF 2.0 or 1.1?

CSF 2.0, including the Govern Function introduced in that revision. If you previously assessed against 1.1, the Govern results will usually be the largest change.

Can we compare year on year?

Yes, provided the method stays fixed. Celeredge holds the framework, its dimensions and its scoring bands as a versioned asset, so a re-run measures change in your controls rather than change in the rubric.

Score it on your own evidence.

A maturity picture you can defend, and re-run next quarter to show movement.