thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

CSF Organizational Profile

Description of an organization's current or target cybersecurity posture in terms of CSF Core outcomes.

Definition

A Current Profile states which outcomes are currently achieved; a Target Profile states desired outcomes based on risk and objectives. Gap analysis between them drives an action plan. CSF 2.0 also introduced Community Profiles that serve as baselines for sectors or use cases.

Example

A bank's Target Profile prioritizes GV.SC outcomes because of heavy reliance on fintech vendors.

Exam tip

Profiles enable gap analysis; Tiers characterize rigor of risk governance and management.

Related terms