Free NIST CSF Vendor Questionnaire Template | UpGuard

This document is a NIST Cybersecurity Framework (CSF) vendor questionnaire template intended for vendor risk management, providing structured questions to evaluate alignment with the Identify, Protect, Detect, Respond, and Recover functions. It covers asset management, business environment, governance, risk assessment, access control, awareness and training, data security, information protection processes, anomaly detection, continuous monitoring, detection processes, incident response, recovery planning, improvements, and communications, with references to supporting tools and practices for compliance and assessment workflows.