Achieving NIST CSF 2.0 Top Tier Adaptable Status

This document outlines NIST CSF 2.0’s major updates—most notably the addition of the Govern function, expanded applicability beyond critical infrastructure, and stronger supply chain risk focus—and explains how Qualys’ Enterprise TruRisk Platform and apps (PC, CSAM, VMDR, FIM, EDR, TotalCloud, SAQ) map to and support all six CSF functions (Govern, Identify, Protect, Detect, Respond, Recover) through centralized visibility, automated remediation, policy compliance, and integrations to improve risk management and compliance outcomes.