NIST CSF Tabletop Audit
Assess your cybersecurity maturity across all 5 NIST CSF core functions in 12 minutes.
What You'll Discover
Your NIST CSF Maturity Score
Get a comprehensive score (-800 to +450) showing your cybersecurity maturity across all 5 NIST CSF core functions: Identify, Protect, Detect, Respond, and Recover, plus Governance & Risk Management.
Cyber Risk Management Capability
Understand your ability to manage cybersecurity risks using the most widely-adopted framework in the world. See where you stand from Partial Implementation to Mature Program.
Critical Function Gaps
Identify specific weaknesses in your Identify, Protect, Detect, Respond, and Recover capabilities - see exactly which CSF functions need improvement.
Implementation Timeline
Receive realistic timeline estimates for reaching CSF maturity - from emergency remediation (90+ days) to optimization (30 days) based on your current state.
Have you identified and documented all critical assets, systems, data, and services?
Assessment Categories
We evaluate your organization across all 5 NIST CSF core functions
Identify (ID)
Asset identification, business context, risk assessment, supply chain risk - understanding what you need to protect
Protect (PR)
Access control, awareness training, data security, protective technology, backups - safeguarding critical assets
Detect (DE)
Continuous monitoring, logging, anomaly detection, detection testing - finding threats before they cause damage
Respond (RS)
Incident response plan, roles & communication, containment, eradication, lessons learned - managing active incidents
Recover (RC)
Recovery planning, recovery testing, communication plans - restoring operations after cyber incidents
Governance & Risk Management
Policies & procedures, leadership engagement, risk governance - organizational foundation for cybersecurity
Why This Assessment Is Different
Based on Real NIST CSF Implementations
Questions derived from actual NIST CSF implementations and assessments - we know what works and what doesn't
35+ Years in Cybersecurity
Developed by practitioners who've implemented NIST CSF programs for complex organizations
Brutally Honest Scoring
We tell you the truth about your cybersecurity maturity, even if it's uncomfortable - better to know now
Let's Fix Your NIST CSF Gaps
Talk to Craig about your assessment results and get a customized plan to improve your cybersecurity maturity.
(•••) •••-••••
No sales pitch • Honest assessment • 35+ years successfully running IT and security for businesses