Glossary: Governance, Risk and Compliance
self-assessment
An organization rating itself against a framework, usually with a questionnaire. It is cheap and repeatable; Kettle & Crane scores itself 0-4 on each NIST CSF function, with evidence behind each answer.
Where the book teaches it
Related terms
NIST Cybersecurity Framework (CSF) 2.0gap analysisassessment