Frequently Asked Questions

Have the information in this application been updated with the latest NIST updates?
Yes - The CCII Tool has been updates to NIST CSF 1.1

Are all questions listed in the Target Profile Questionnaire mandatory?
Although extensive, answering all of the questions in the Target Profile ensures that the agency has a complete goal for their cybersecurity program. Including things that are already accomplished allows it to be accurately scored against your current profile and the score will change as things are enacted.

How long should it take to complete all seven steps of the cybersecurity framework?
There is no set timeline as to how long it should take to complete the steps. This falls heavily on how great of detail the agency chooses to go into, agency size and complexity of the environment.