Skip to content

Cyber EssentialsNIST CSF 2.0 crosswalk

A control-by-control mapping between UK Cyber Essentials and NIST Cybersecurity Framework 2.0. 5 mappings.

Cyber EssentialsNIST CSF 2.0RelationshipNotes
CE-1
Firewalls
PR.PS-01
Configuration management practices established
PartialCurated
Configuration sécurisée et durcissement
CE-2
Secure configuration
PR.PS-01
Configuration management practices established
EquivalentCurated
Configuration sécurisée et durcissement
CE-3
User access control
PR.AA-01
Identities and credentials managed
EquivalentCurated
Contrôle d'accès et identité
CE-3
User access control
PR.AA-05
Access permissions and authorizations enforced
EquivalentCurated
Contrôle d'accès et identité
CE-5
Security update management
ID.RA-01
Vulnerabilities identified and recorded
EquivalentCurated
Gestion des vulnérabilités

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.