← All Tools

NIST CSF 2.0 Tier Self-Assessment

For each dimension, pick the statement that best matches your organization today. The tool reports your NIST CSF 2.0 Implementation Tier per dimension, per category, and as an honest overall rating — with what reaching the next Tier entails.

100% client-side. Answers are saved only to your browser’s localStorage — nothing leaves your device. Source: NIST CSF 2.0 (NIST.CSWP.29), §3.2 & Appendix B.
Tiers are not maturity levels. A higher Tier is not automatically better. Choose the Tier appropriate to your mission, threat environment, requirements and risk tolerance. This is a self-assessment aid — not an audit or certification.

Export

Authoritative source: NIST CSF 2.0 (NIST.CSWP.29), February 26 2024 — Tier definitions from §3.2 and the notional illustration in Appendix B (Table 2). The option text below is rendered faithfully from that publication.

🍜 From the same menu
📉
BIA / RTO-RPO Calculator
Run a Business Impact Analysis: rate impact over time, derive RTO/RPO and criticality tiers, flag SPOFs. Maps to DORA operational resilience
📝
GDPR Request Generator
Write a GDPR data subject request (access Art. 15, rectification Art. 16, erasure Art. 17, portability Art. 20, objection Art. 21) in English, French or German, with the Art. 12(3) one-month deadline and the Art. 77 complaint route. Copy, .txt, .pdf or e-mail. Client-side, nothing stored
🍽
Third-Party Risk Register
Browser-local register of your ICT third parties: DORA-style criticality tiering, status, frameworks, review dates with overdue flags, open findings. CSV import/export, encrypted backup, hand-off to the questionnaire generator