NIST CSF Framework Categories

NIST CSF ID.RM-1: Establishing Stakeholder-Approved Risk Management Processes
NIST CSF ID.RM-2: Organizational Risk Tolerance is Determined and Clearly Expressed
ID.RM-3: Risk Tolerance Informed by Critical Infrastructure Role
NIST CSF ID.SC-1: Organizational Cyber Supply Chain Risk Management Processes
NIST CSF ID.SC-2: Cyber Supply Chain Risk Assessment for Suppliers
NIST CSF ID.SC-3: Cybersecurity & Supply Chain Risk Management Plan
NIST CSF ID.SC-4: Supplier and Partner Audits for Compliance
NIST CSF ID.SC-5: Supplier & Third-Party Response Planning & Testing
NIST CSF PR.AC-1: Identity & Credential Management for Authorized Entities