Security Functions

NIST CSF 2.0 defines six main enterprise security functions:

1. Govern - Manage the entire risk management operation. Newly added in NIST CSF 2.0.
2. Identify - Understand the attack surface and risks.
3. Protect - Secure identified assets and handle identified risks.
4. Detect - Find out that you’re being attacked.
5. Respond - Following detection, take action to analyze and contain.
6. Recover - Recover assets and operations to a functional, secure state following an attack.

In this chapter you will find solutions categorized into functions. If a solution targets one specific asset class, look for it in the Assets section.

---

Table of contents

• Govern
• Identify & Protect
• Detect & Respond
• Recover