NIST CSF 2.0 assessment
NIST CSF 2.0 assessments, scored on your client's own evidence
Benchmark a client's cyber maturity across all six Functions of CSF 2.0, including Govern, from the documents and data they already hold rather than a workshop full of self-ratings.
From $59 per seat / month billed annually ($70 monthly), after a 7-day free trial. CSF is a voluntary framework, so there is no certificate at the end, only a defensible maturity picture.
The problem
Where CSF assessments go wrong
Scored on opinion, not evidence
A workshop where people self-rate their own function produces a flattering number the client's board can't rely on.
Govern is the new gap
CSF 2.0 added Govern as a Function in its own right, and it is the one most existing assessments have nothing to say about.
No reason to come back
A one-off score is a snapshot. Without a repeatable method, next year's number isn't comparable, and the client has no measured progress to pay you for.
How Celeredge helps
All six Functions, scored the same way twice
Celeredge assesses Govern, Identify, Protect, Detect, Respond and Recover from the evidence the client supplies, bands the result, and keeps the method fixed so a re-run is genuinely comparable.
- All six CSF 2.0 Functions, including Govern
- Every score traceable to the evidence behind it
- Gaps ranked by severity to drive the improvement plan
- Re-runnable on a schedule, so the trend is real rather than re-scored
Explore more
Related to NIST CSF 2.0
Questions
NIST CSF 2.0 assessment FAQ
Is there a NIST CSF certification?
No. CSF is a voluntary framework, not a certifiable standard. The output is a maturity and gap picture, which is exactly why the evidence trail behind each score matters so much.
Does it cover CSF 2.0 or 1.1?
CSF 2.0, including the Govern Function introduced in that revision. If the client was previously assessed against 1.1, the Govern results will usually be the largest change.
Can we compare year on year?
Yes, provided the method stays fixed. Celeredge holds the framework, its dimensions and its scoring bands as a versioned asset, so a re-run measures change in the client's controls rather than change in the rubric.
Score it on one client's evidence.
A maturity picture the client can defend, and a re-run next quarter that shows movement.