thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

CSF Core

Taxonomy of cybersecurity outcomes in the NIST CSF, organized as functions, categories, and subcategories.

Definition

The CSF 2.0 Core contains 6 functions, 22 categories, and 106 subcategories. Implementation examples and informative references (via the NIST Cybersecurity and Privacy Reference Tool) link outcomes to controls in standards such as SP 800-53 and ISO/IEC 27001. The Core describes what to achieve, not how.

Example

Subcategory PR.AA-01 calls for managing identities and credentials for authorized users, services, and hardware.

Exam tip

The Core is outcome-based and technology-neutral; it is not a control catalog.

Related terms