NIST CSF 2.0 Govern function: what's new and how to evidence it
CSF 2.0 added Govern as a sixth function. It covers strategy, roles, policy, oversight and supply chain risk, and it is where most organisations have the least evidence.
NIST & CIS
NIST CSF 2.0, NIST SP 800-53, CIS Controls and CMMC, from profiles to control baselines.
Implementing it? See NIST CSF 2.0 on QULDEX.