Fix NIST CSF 2.0 category counts in table: ID=3, RC=2

The summary table had incorrect category counts for Identify (4 → 3)
and Recover (1 → 2), inconsistent with the frontmatter mapping and
official NIST CSF 2.0 specification (GV:6 + ID:3 + PR:5 + DE:2 +
RS:4 + RC:2 = 22 categories).
This commit is contained in:
juliosuas
2026-03-18 10:36:51 -06:00
committed by mukul975
parent 1e2d015ef4
commit 34e0cf6e2d
@@ -27,11 +27,11 @@ The NIST Cybersecurity Framework (CSF) 2.0, released in February 2024, provides
| Function | Code | Categories | Purpose |
|----------|------|-----------|---------|
| **Govern** | GV | 6 | Establish and monitor cybersecurity risk management strategy |
| **Identify** | ID | 4 | Determine current cybersecurity risk to the organization |
| **Identify** | ID | 3 | Determine current cybersecurity risk to the organization |
| **Protect** | PR | 5 | Implement safeguards to prevent or reduce risk |
| **Detect** | DE | 2 | Find and analyze possible cybersecurity attacks |
| **Respond** | RS | 4 | Take action regarding detected cybersecurity incidents |
| **Recover** | RC | 1 | Restore capabilities impaired by cybersecurity incidents |
| **Recover** | RC | 2 | Restore capabilities impaired by cybersecurity incidents |
### Govern Function (New in CSF 2.0)
- GV.OC: Organizational Context