Does this skill support NIST CSF 1.1 or 2.0?

This skill is specifically designed for NIST CSF 2.0, incorporating the updated taxonomy and the mandatory Govern (GV) function released in February 2024.

What are the Implementation Tiers used in the assessment?

The assessment utilizes the four NIST tiers: Tier 1 (Partial), Tier 2 (Risk-Informed), Tier 3 (Repeatable), and Tier 4 (Adaptive) to measure organizational maturity.

Is the Govern function included?

Yes, the skill covers all 6 categories of the new Govern function, including Organizational Context, Risk Management Strategy, and Supply Chain Risk Management.

What artifacts are produced using this skill?

The workflow guides you in creating Current and Target Profiles, Maturity Scorecards, Gap Analysis Reports, and prioritized Improvement Roadmaps.

Can this skill help with gap analysis?

Yes, it provides a structured methodology to compare your Current Profile against a defined Target Profile, identifying specific areas for security investment.

NIST CSF 2.0 Maturity Assessment

Name: NIST CSF 2.0 Maturity Assessment
Author: micsapp

bymicsapp

0•

Seguridad y Pruebas

Conducts comprehensive cybersecurity maturity assessments using the NIST CSF 2.0 framework to evaluate risk posture and create strategic improvement roadmaps.

This skill empowers Claude to guide organizations through the NIST Cybersecurity Framework (CSF) 2.0 assessment process, covering all six core functions including the new Govern function. It facilitates the evaluation of organizational security posture across four implementation tiers—from Partial to Adaptive—helping teams identify critical gaps, define target maturity states, and develop prioritized remediation roadmaps aligned with industry best practices and regulatory requirements.

Características Principales

01Comprehensive alignment with NIST CSF 2.0 Functions: Govern, Identify, Protect, Detect, Respond, and Recover

02Gap analysis tools to compare current security profiles against desired target states

030 GitHub stars

04Structured 5-phase workflow from initial scoping to continuous implementation monitoring

05Guidance on creating prioritized roadmaps with short, medium, and long-term initiatives

06Maturity scoring based on the four NIST Implementation Tiers for granular posture analysis

Casos de Uso

01Validating organizational security controls and governance during compliance audits or M&A due diligence

02Developing a strategic cybersecurity improvement roadmap for executive leadership and stakeholders

03Conducting annual enterprise-wide cybersecurity risk and maturity assessments

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills performing-nist-csf-maturity-assessment

For use in Claude.ai and ChatGPT

Características Principales

01Comprehensive alignment with NIST CSF 2.0 Functions: Govern, Identify, Protect, Detect, Respond, and Recover

02Gap analysis tools to compare current security profiles against desired target states

030 GitHub stars

04Structured 5-phase workflow from initial scoping to continuous implementation monitoring

05Guidance on creating prioritized roadmaps with short, medium, and long-term initiatives

06Maturity scoring based on the four NIST Implementation Tiers for granular posture analysis

Casos de Uso

01Validating organizational security controls and governance during compliance audits or M&A due diligence

02Developing a strategic cybersecurity improvement roadmap for executive leadership and stakeholders

03Conducting annual enterprise-wide cybersecurity risk and maturity assessments