Quiz Entry - updated: 2026.07.14
What are the three components of the NIST Cybersecurity Framework?
Core, Implementation Tiers, and Profiles.
* The three CSF components — Core is the menu, Profiles are your order, Tiers rate how disciplined the practice is. *
| Component | What it is | Question it answers |
|---|---|---|
| Core | Hierarchy of functions, categories, subcategories + references | What security outcomes exist? |
| Implementation Tiers | 4-level scale describing how rigorously you manage risk | How mature is our risk practice? |
| Profiles | Your selection/prioritization of Core outcomes | Which outcomes matter to us, now vs. target? |
The three play together: the Core is the menu, the Profile is your order from that menu, and the Tier describes how disciplined your kitchen is.
Tip: Remember C-T-P: "Choose The Priorities" — Core lists everything, Tiers rate you, Profiles pick what applies.