HRM-GOV-08Term
NIST CSF tier
One of four NIST CSF 2.0 tiers, Partial, Risk Informed, Repeatable and Adaptive, that characterize the rigor of an organization's cybersecurity risk governance and management practices. NIST states that tiers are not maturity levels.
Example
A GRC lead maps the program’s Prioritize level to Tier 3 Repeatable in the annual CSF profile and notes the distinction.
Also called
1How analysts, standards and vendors name the same idea.
- TiersNIST CSF 2.0Section 3.2.
Sources
1Related terms
3"NIST CSF tier" (HRM-GOV-08), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/terms/nist-csf-tier
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.