The Data Behind The Results
This report draws on more than 2,400 data points spanning 21 countries and 16 industries. We mapped every result to two NIST frameworks, the Cybersecurity Framework( CSF 2.0) and the AI Risk Management Framework( AI RMF 1.0), and measured Shadow AI exposure.
Maturity- NIST CSF 2.0
We scored the six core functions of the NIST CSF 2.0 framework:
GOVERN |
IDENTIFY |
PROTECT |
Policies, accountability, |
Asset visibility and |
Safeguards and |
and risk strategy |
risk assessment |
access controls |
DETECT |
RESPOND |
RECOVER |
Monitoring and |
Incident response |
Recovery planning |
anomaly detection |
and communication |
and continuity |
7