Consulting

NIST Assessment

Our experts have completed scores of NIST assessments for enterprise teams, government agencies, and even commercial security vendors hoping to map their functions to the CSF. We can also map to adjacent frameworks.

TAG Cyber specializes in NIST Cybersecurity Framework (CSF) analysis for both enterprise teams and commercial cybersecurity vendors. In each case, our experts will provide a detailed review of your existing environment, network, system, tool, or platform – and we will offer expert judgment regarding your coverage and gaps.

For enterprise teams, this is a refreshing review process, one that combines our experience, expertise, and insight into the security compliance process. We work with your security and compliance teams to organize your existing policy document and control libraries into a format that can be analyzed and automated into a GRC platform.

For commercial vendors, this is a strong sales and marketing activity, one that results in collateral that can be shared directly with your customers. We work with you to identify the specific subset of NIST CSF requirements that your platform offers customers – either directly or indirectly. And we sign our name to the resulting document.

We are also happy to map your requirements to complementary frameworks of interest to your team. This includes PCI DSS, HIPAA, CIS 20, and many other cyber security frameworks. We work with your team to make sure that this process is automated so that you can maintain and update the mapping over the long term.