NIST Cybersecurity Framework 2.0

Our assessments are aligned with NIST CSF 2.0 (released February 2024) and focus on outcome-based thinking, not framework memorisation. Questions test your ability to apply the framework's six functions in real-world scenarios.

CSF 2.0 Aligned
Outcome-Focused
6 Functions

NIST CSF 2.0 Alignment

These assessments are aligned with NIST Cybersecurity Framework 2.0 (released February 2024) teachings and focus on outcome-based application. This is educational guidance aligned with NIST standards, not an official NIST assessment. Passing demonstrates understanding of framework application but does not constitute NIST certification.

Available Assessments

CSF 2.0 Functions Assessment

Scenario-based questions covering all 6 functions: Govern, Identify, Protect, Detect, Respond, Recover

60 minutes
All 6 functions covered
75% passing threshold

CSF 2.0 Practice Assessment

Comprehensive practice with scenario-based questions across all functions

Untimed practice
All scenarios available
Immediate feedback

Assessment Format (NIST CSF 2.0)

Question Types

Scenario-based questions (outcome-focused)100%

NIST CSF 2.0 assessments focus on scenario-based questions that test your ability to apply the framework's functions to real-world situations. Questions ask "What outcome should you measure?" or "Which function addresses this scenario?" rather than framework memorisation.

Framework Functions (CSF 2.0)

Govern (NEW in 2.0)Organisational cybersecurity risk management
IdentifyUnderstanding cybersecurity risk
ProtectSafeguards to ensure service delivery
DetectIdentifying cybersecurity events
RespondTaking action regarding incidents
RecoverRestoring capabilities and services

Note: CSF 2.0 (released February 2024) added the "Govern" function, expanding from 5 to 6 functions. All assessments use the latest 2.0 framework.

Framework Alignment

Our assessments are carefully aligned with NIST CSF 2.0 (February 2024):

  • Framework version: NIST CSF 2.0 (latest, released February 2024) with all 6 functions including Govern
  • Question focus: Outcome-based thinking and scenario application, not framework memorisation
  • Function coverage: All 6 functions (Govern, Identify, Protect, Detect, Respond, Recover)
  • Scenario-based: Questions test real-world application of framework principles
  • Latest guidance: Incorporates CSF 2.0 updates including supply chain risk management enhancements

Preparation Resources

Quick feedback

Optional. This helps improve accuracy and usefulness. No accounts required.