Current to target.

Turn a selected set of cybersecurity outcomes into a scoped evidence review and an owned improvement plan.

Your working notes stay in this tab

This tool does not send assessment entries to a server or save them after you leave. Download the JSON before closing or refreshing the page. Avoid entering passwords or secrets.

Export options

Selected outcomes0Of 12 starter outcomes

Evidence noted0Selected outcomes with evidence text

Gaps recorded0Explicit gap or decision entries

Actions with owner0Action and owner both entered

01 / SCOPE

Set the boundary

Describe the service, business unit, or environment this profile covers. A precise scope makes the evidence and gaps useful.

Profile name (required for export)

Reviewer or team

Scope and boundaries (required for export)

Purpose or decision to support

Planned review date

02 / OUTCOMES

Choose the outcomes that apply

This curated 12-outcome starter set spans all six CSF functions. Select relevant outcomes, then record your current practice, evidence, target, and next action. Use NIST’s full template for a complete profile.

03 / REVIEW

Action register

Entries appear here when you record a gap, decision, or action. Counts reflect your input; they are not a maturity score.

04 / TAKE IT WITH YOU

Export your work

JSON preserves the editable profile. CSV carries the recorded evidence, target, gaps, and actions into a working register. Files download to your device.

Restore a profile JSON file

Start with a scope and select the outcomes that apply.

SOURCE & LIMITS

Use the framework correctly

Outcome identifiers align with NIST CSF 2.0; the short labels and prompts here are editorial summaries. This independent tool is a planning aid, not a NIST certification, endorsement, or compliance determination.

Official CSF 2.0 Core NIST profile guide (SP 1301) Full NIST profile template