IT Examiner School - Oct 2023

NIST CSF Framework version 1.1

11

NIST CSF Framework version 1.1 1. Prioritize & Scope 2. Orientation 3. Create a current profile (Current State) 4. Conduct a risk assessment 5. Create a target profile (End State) 6. Determine, Analyze and prioritize gaps 7. Implement action plan

Information Security Program Roadmap

12