B. The Frameworks
NIST CYBERSECURITY FRAMEWORK( CSF) 2.0— SIX FUNCTIONS
FUNCTION Govern Identify Protect Detect Respond Recover
FOCUS Strategy, risk tolerance, policy, and oversight Asset inventory and risk assessment Safeguards, access controls, and preventive measures Monitoring and anomaly detection Incident response, analysis, and communication Restoration and business continuity
NIST AI RISK MANAGEMENT FRAMEWORK( AI RMF) 1.0— FOUR FUNCTIONS
FUNCTION Govern
Map
Measure
Manage
FOCUS Leadership & oversight; policies & procedures; culture
System inventory; stakeholder engagement; context analysis
Risk assessment; performance monitoring; metrics & tools
Risk mitigation; incident response; continuous improvement
30