QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Challenging Clearbrook Water Services' NIST CSF 2.0 target profile: on the left the inherited consultant grid that rated every category 3 with no evidence and a board call for tier 4 everywhere costing about $31.4m plus $4.2m a year; in the centre the eight-segment profile loop of scope, current, target, CIS mapping, gap and invest, challenge, measurement and governance; and on the right the Target Profile Pack v1.0 with 41 evidenced priority subcategories, Tier 3 Repeatable in 36 months, 20 of 26 gap items funded inside a $9.6m envelope, 6 below the line with exposure stated, and a challenge report recording every changed target.
CY-EXPERT-051Expert Level · NIST CSF and CIS Controls

CSF Target Profile Control Challenge — The Profile Loop

An expert-level control-challenge course that turns an unevidenced CSF grid and an uncosted 'tier 4 everywhere' resolution into a defensible CSF 2.0 target profile: scope the profile to the mission, rate the current state on re-performable evidence, justify every target by risk and appetite, trace targets to CIS Controls v8.1 safeguards and Implementation Groups, rank and fund the gaps, challenge the target independently against scenarios and cost, measure progress per outcome, and govern and refresh the profile. Eight labs build one challenged, board-approved Target Profile Pack.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

  • Design the scope of a CSF 2.0 Organizational Profile around mission, drivers, OT and IT segments, and priority subcategories.
  • Rate a current profile on graded, re-performable evidence and assess tiers as governance and management rigour.
  • Justify target outcomes and tiers with risk scenarios, appetite statements, drivers, cost bands, and recorded holds.
  • Map target outcomes to CIS Controls v8.1 safeguards and Implementation Groups, with OT adaptations and evidenced status.

Price:৳12,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.