The NIST Cybersecurity Framework—commonly called the NIST CSF—is one of the world’s most widely recognized approaches to managing cybersecurity risk. NIST CSF 2.0 expands the Framework beyond critical infrastructure, strengthens its focus on cybersecurity governance, and introduces the new Govern Function alongside Identify, Protect, Detect, Respond, and Recover.
But understanding the names of the six Functions isn’t enough. This course explains how the NIST CSF 2.0 works as an integrated, outcome-based framework—and how organizations can use it to understand risk, establish priorities, evaluate current capabilities, define desired outcomes, and build a practical cybersecurity improvement roadmap. You’ll move beyond memorizing terminology and learn how the CSF Core, Organizational Profiles, Implementation Tiers, Implementation Examples, and Informative References work together. You’ll also see why the CSF describes cybersecurity outcomes rather than prescribing a universal list of controls.
Throughout the course, you’ll follow HarborPoint Client Services, a realistic case study that demonstrates how an organization can apply the NIST CSF 2.0 concepts to a business environment. You’ll examine organizational context, governance, assets, risk assessments, safeguards, monitoring, incident response, recovery, evidence, measurement, Profile gaps, and implementation planning.
