ISF Indicative Mapping between NIST Cybersecurity Framework 2.0 and 1.1

Is your organisation ready to respond to the NIST Cybersecurity Framework 2.0 update?

To assist both organisations and individuals in understanding the changes within the NIST Cybersecurity framework (NIST CSF), the ISF has created an illustrative mapping document.

• The document is designed to be easily digestible, with each 2.0 Subcategory mapped, where feasible, to one or more Subcategories in 1.1.
• Each mapping is accompanied by an alignment rating, facilitating practitioners’ understanding of the level of alignment between the two Subcategories.
• All new Subcategories introduced in 2.0 and any Subcategories discarded in 1.1 are highlighted.

In accordance with any incremental changes made by NIST, this document will be updated and will serve the purpose of aligning the latest version to the ISF Standard of Good Practice for Information Security (SOGP).