International
NIST CSF compliance, made simple
The NIST Cybersecurity Framework organises cybersecurity practice into five core functions — Identify, Protect, Detect, Respond, and Recover — and is widely used as a common reference point even outside the US federal context it originated in.
ComplianceDesk gives you 24 pre-built NIST CSF controls, an evidence vault, audit-ready reports, and reminders before anything falls overdue — so proving NIST CSF compliance stops being a spreadsheet exercise.
Every NIST CSF control, organised for you
The real control library ComplianceDesk seeds the moment you activate NIST CSF — 24 controls across 6 categories.
Govern
- NIST-1.1 Cybersecurity strategy and roles established
- NIST-1.2 Cybersecurity risk management oversight
- NIST-1.3 Cybersecurity supply chain risk management
- NIST-1.4 Cybersecurity policy established and communicated
- NIST-1.5 Organisational context for cybersecurity risk understood
- NIST-1.6 Risk management strategy and tolerance established
Identify
- NIST-2.1 Asset inventory maintained
- NIST-2.2 Cybersecurity risk assessment performed
- NIST-2.3 Vulnerability identification and management
- NIST-2.4 Continuous improvement of risk management processes
Protect
- NIST-3.1 Access control and identity management implemented
- NIST-3.2 Data security controls implemented
- NIST-3.3 Security awareness and training programme
- NIST-3.4 Platform and technology hardening
- NIST-3.5 Technology infrastructure resilience architected
Detect
- NIST-4.1 Anomalies and security events detected
- NIST-4.2 Continuous security monitoring
Respond
- NIST-5.1 Incident response plan executed
- NIST-5.2 Incident communication procedures defined
- NIST-5.3 Incident containment and mitigation
- NIST-5.4 Incident analysis performed to determine root cause, scope and impact
Recover
- NIST-6.1 Recovery plan executed
- NIST-6.2 Post-incident improvements incorporated
- NIST-6.3 Recovery activities communicated to stakeholders
Frequently asked questions
How many controls does ComplianceDesk track for NIST CSF?
24, organised into 6 categories, ready to assign to an owner as soon as you activate the framework.
Can I track NIST CSF alongside other frameworks?
Yes — most teams activate several frameworks at once. Controls that overlap across frameworks can share the same evidence, so you don't collect the same document twice.
How long does it take to set up NIST CSF in ComplianceDesk?
Activating NIST CSF instantly seeds its full control library. Most teams assign owners and get their first controls moving within a day.
Related guides
Other International frameworks
See your full compliance picture
131 frameworks, one system of record.