NIST Cybersecurity Framework (CSF) 2.0 with Safeguard: Govern, Identify, Protect, Detect, Respond, Recover

IntermediateFree5 modules · 13 lessons · ~2 min

About this course

NIST CSF 2.0 is a voluntary, outcome-based framework of 6 Functions, 22 Categories and 106 Subcategories that lets boards, customers and engineers talk about cybersecurity risk in one language, and its new GOVERN Function puts supply chain risk squarely in leadership's hands. This course walks every Function, shows which Safeguard tabs, connectors and scanner outputs evidence each Subcategory, and ends by building an honest Current and Target Profile, selecting a Tier, and keeping the Profile current by reusing evidence already collected for SOC 2, ISO 27001, HIPAA and SSDF.

What you'll learn

CSF 2.0 Structure and How to Use It

What CSF 2.0 Is, and What It Is Not
Profiles, Tiers, Informative References and Quick Start Guides
Why GOVERN Was Added, and How CSF Sits Beside SOC 2, ISO 27001, HIPAA and SSDF

GOVERN and IDENTIFY with Safeguard

GOVERN: Context, Strategy, Roles, Policy and Oversight
GV.SC: Cybersecurity Supply Chain Risk Management
IDENTIFY: Asset Management, Risk Assessment and Improvement

PROTECT with Safeguard

PR.AA and PR.AT: Identity, Access Control and Awareness
PR.DS and PR.PS: Data Security and Platform Security
PR.PS-06 Secure Software Development and PR.IR Infrastructure Resilience

01CSF 2.0 Structure and How to Use It3 lessons

What CSF 2.0 Is, and What It Is Not
Profiles, Tiers, Informative References and Quick Start Guides
Why GOVERN Was Added, and How CSF Sits Beside SOC 2, ISO 27001, HIPAA and SSDF

02GOVERN and IDENTIFY with Safeguard3 lessons

Common questions

How much does Safeguard Academy cost?

Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.

What are the prerequisites?

None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.

DETECT, RESPOND and RECOVER with Safeguard

DETECT: Continuous Monitoring and Adverse Event Analysis
RESPOND and RECOVER: Incident Management Through Recovery Communication

Building and Maintaining the Organizational Profile

Building the Current Profile, the Target Profile and the Gap Plan
Reusing Evidence, Stating Alignment and Keeping the Profile Alive

GOVERN: Context, Strategy, Roles, Policy and Oversight

GV.SC: Cybersecurity Supply Chain Risk Management

IDENTIFY: Asset Management, Risk Assessment and Improvement

03PROTECT with Safeguard3 lessons

PR.AA and PR.AT: Identity, Access Control and Awareness
PR.DS and PR.PS: Data Security and Platform Security
PR.PS-06 Secure Software Development and PR.IR Infrastructure Resilience

04DETECT, RESPOND and RECOVER with Safeguard2 lessons

DETECT: Continuous Monitoring and Adverse Event Analysis
RESPOND and RECOVER: Incident Management Through Recovery Communication

05Building and Maintaining the Organizational Profile2 lessons

Building the Current Profile, the Target Profile and the Gap Plan
Reusing Evidence, Stating Alignment and Keeping the Profile Alive2 min

What happens if I fail the exam?

You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.

How long is a certificate valid?

The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.