SESK: Stuff Everyone Should Know · sesk.info/secplus-csf-2-six-functions
Which list names all six functions of NIST Cybersecurity Framework 2.0?
Govern, Identify, Protect, Detect, Respond, Recover.
- Identify, Protect, Detect, Respond, Recover, Review
- Govern, Identify, Protect, Detect, Respond, Recover ✔
- Plan, Do, Check, Act, Govern, Audit
Why: CSF 2.0 organizes cybersecurity outcomes into six Functions. Govern sits at the center and informs how the other five are carried out. The older five-function list lacked Govern.
Huh, didn't know that: NIST published CSF 2.0 on February 26, 2024.
The six CSF functions walk into a bar. Govern is already at the center table giving orders.
Like this card?
References
Answer: Govern, Identify, Protect, Detect, Respond, Recover. CSF 2.0 organizes cybersecurity outcomes into six Functions. Govern sits at the center and informs how the other five are carried out. The older five-function list lacked Govern.
- NIST Cybersecurity Framework (CSF) 2.0 nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.29.pdf
There are six CSF Functions: Govern, Identify, Protect, Detect, Respond, and Recover.
Checked 2026-10-10. - NIST Cybersecurity Framework (CSF) 2.0 nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.29.pdf
GOVERN is in the center of the wheel because it informs how an organization will implement the other five Functions.
Checked 2026-10-10. - NIST Cybersecurity Framework (CSF) 2.0 nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.29.pdf
February 26, 2024
Checked 2026-10-10.
Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.
More stuff everyone should know
Security & PrivacySplitting a sensitive task, like creating and approving payments, among different people is called what?Security & PrivacyWhich governance document gives detailed, step-by-step instructions for carrying out a security task?Security & PrivacyBuying cyber insurance to shift financial loss to an insurer is which type of risk response?
That's stuff everyone should know.