NIST CSF
The NIST Cybersecurity Framework organizes security outcomes into six functions: Govern, Identify, Protect, Detect, Respond, and Recover. Varman ships version 2.0 as a prebuilt framework.
NIST Cybersecurity Framework 2.0
What you get with NIST CSF.
- NIST CSF 2.0 available as a prebuilt framework
- 106 requirements tracked with status and evidence
- Readiness shown per framework as evidence lands
Running NIST CSF in Varman
NIST Cybersecurity Framework 2.0 is available in Varman as a prebuilt framework with 106 requirements. You add it to your workspace and work through it in the same place as your policies, risks, vendors, and evidence.
1. Add the framework
Each NIST CSF requirement appears with its status, so you can see what is met and what is still open.
2. Connect your systems
Integrations run scheduled checks against your cloud, identity, and developer tools and record the results as evidence. See the integrations.
3. Close the gaps
Policies, tasks, and uploaded evidence cover what cannot be checked automatically. Readiness for NIST CSF updates as each item is completed.
4. Work with your auditor
Varman organizes the evidence. Any audit, assessment, or certification is carried out by an independent third party, not by Varman.