NIST CSF 2.0 Assessment

See where your security stands today, and where to take it next. IT Hawaii's NIST CSF 2.0 assessment scores your business across all six CSF functions and gives you a prioritized plan, with the quick wins first, anywhere in Hawaii.

Give us a call
IT Hawaii team members meeting around a conference table

Your starting point for a stronger security program

NIST CSF 2.0 is the cybersecurity framework from the U.S. National Institute of Standards and Technology. It organizes security into six functions: Govern, Identify, Protect, Detect, Respond and Recover. Our assessment is the first step when we build your cybersecurity program, and you can also buy it on its own.

IT Hawaii technician reviewing systems across two monitors

How the assessment works

Our cybersecurity team talks with your owners, managers and key staff about how your business runs. We review your systems, settings, accounts, backups and security tools, along with your policies, procedures and vendor contracts. Then we score your business across all six CSF functions.

Your next move, your choice

You can turn the action plan into a cybersecurity program that IT Hawaii builds and manages with you, work through it with your own IT, or hire us for specific fixes. You can also put the results toward compliance work for HIPAA, PCI DSS, SEC Regulation S-P or CMMC, and toward security questionnaires.

Let's talk
IT Hawaii team members talking around a conference table with a laptop

What you get

Clear answers about your security, ready for your owners and your IT team.

Printed assessment report open to six score bars beside a navy notebook and a silver pen on a marble table

Written report

Your findings and scores across Govern, Identify, Protect, Detect, Respond and Recover.
Laptop showing a prioritized security checklist with multi-factor authentication and a backup restore test checked off

Prioritized action plan

The fixes that matter most, in order, with the quick wins first.
Wall screen showing a six-sided chart with a smaller current profile inside a larger target profile

Current and target profiles

Where your security is today, and where it should be for a business like yours.
Conference room set for a meeting, with printed reports at each seat and results on the wall screen

Leadership walkthrough

A meeting that walks your owners or leadership through the results.

Ready to see where you stand?

Tell us about your business and your IT setup. The assessment is for Hawaii businesses with 10 or more employees and works alongside your current IT provider or in-house team. A real person will reach out within one business day.

Talk to us!

Frequently asked questions

1
What is a NIST CSF 2.0 assessment?

A NIST CSF 2.0 assessment measures a business's cybersecurity against the NIST Cybersecurity Framework 2.0. IT Hawaii's assessment scores your business across the framework's six functions (Govern, Identify, Protect, Detect, Respond and Recover) and gives you a written report and a prioritized action plan.

3
What do we get at the end?

A written report of findings and scores, a prioritized action plan with the quick wins first, current and target profiles, and a meeting that walks your owners or leadership through the results.

5
Does the assessment help with compliance?

Yes. You can use the results toward HIPAA, PCI DSS, SEC Regulation S-P or CMMC work, and toward security questionnaires from insurers, clients and vendors.

2
What does the assessment include?

Interviews with your owners, managers and key staff; a technical review of your systems, settings, accounts, backups and security tools; a review of your policies, procedures and vendor contracts; and scores across all six CSF functions.

4
Can we buy the assessment without a cybersecurity program?

Yes. You can buy the NIST CSF 2.0 assessment on its own. It's also the first step when IT Hawaii builds a cybersecurity program.

6
Who is the assessment for?

Hawaii businesses with 10 or more employees, anywhere in the state. It works alongside your current IT provider or in-house team.