US
NIST CSF 2.0
The NIST Cybersecurity Framework: Govern, Identify, Protect, Detect, Respond, Recover.
Who it applies to
Any organisation that wants a common language for cybersecurity outcomes.
What it can cost
Lost deals, failed audits and penalties set by your regulator or contract.
- Version
- 2.0, published February 2024
- Functions
- Govern, Identify, Protect, Detect, Respond, Recover
- Status
- Voluntary, widely adopted
What NIST CSF 2.0 asks of you
- 01Governance and supply chain risk
- 02Asset management
- 03Identity and access
- 04Data security
- 05Continuous monitoring
- 06Incident response and recovery
How orta covers NIST CSF 2.0
106 NIST CSF 2.0 requirements, mapped
Each requirement is linked to orta's common controls, so evidence you already have counts here too.
Checked from your own systems
Host, Kubernetes and AWS checks run on a schedule and mark controls passing or failing, every day.
Policies drafted from a conversation
orta interviews your team by voice or text, asks only what NIST CSF 2.0 needs, and drafts the policy set from the answers.
Ready for your auditor
Give them a read-only login to see controls, evidence and documents in one place.
What feeds it
- Continuous complianceA passing check counts in every framework that needs it.
- Runtime detectionCatch the attack while it is happening.
- Kubernetes securityEvery cluster, explained.
- Risk managementRisk that moves with reality.
