NIST CSF 2.0 Coverage

This page is generated by scripts/generate_outlines.py from scripts/outline_data.py; do not edit it by hand.

AI Red Team covers every Function and Category of the NIST Cybersecurity Framework 2.0 and treats each Category through the three focus areas of the NIST Cyber AI Profile: securing AI systems, AI-enabled cyber defence and thwarting AI-enabled attacks. The table shows which chapter is responsible for each Category. tests/test_csf_coverage.py fails if a Category has no chapter.

Function Category Name Chapters
Govern GV.OC Organizational Context 3, 5
Govern GV.RM Risk Management Strategy 5
Govern GV.RR Roles, Responsibilities, and Authorities 6
Govern GV.PO Policy 7
Govern GV.OV Oversight 8, 26
Govern GV.SC Cybersecurity Supply Chain Risk Management 8
Identify ID.AM Asset Management 9
Identify ID.RA Risk Assessment 2, 10, 11, 13
Identify ID.IM Improvement 12, 13, 25, 26
Protect PR.AA Identity Management, Authentication, and Access Control 14
Protect PR.AT Awareness and Training 15
Protect PR.DS Data Security 16
Protect PR.PS Platform Security 4, 11, 16
Protect PR.IR Technology Infrastructure Resilience 4, 17
Detect DE.CM Continuous Monitoring 18, 19
Detect DE.AE Adverse Event Analysis 18, 19
Respond RS.MA Incident Management 20
Respond RS.AN Incident Analysis 20
Respond RS.CO Incident Response Reporting and Communication 21
Respond RS.MI Incident Mitigation 21
Recover RC.RP Incident Recovery Plan Execution 22, 23, 24
Recover RC.CO Incident Recovery Communication 24

Chapters by Function

  • Chapter 2, The Threat Landscape When Attackers Use AI: ID.RA
  • Chapter 3, NIST CSF 2.0 with an AI Focus: Functions, Focus Areas and European Obligations: GV.OC
  • Chapter 4, A Reference Architecture for AI-Enabled Cyber Defence: PR.PS, PR.IR
  • Chapter 5, Organisational Context and Risk Strategy for AI in Cyber Defence: GV.OC, GV.RM
  • Chapter 6, Roles, Usage Modes and Autonomy Levels: People in Command of Security AI: GV.RR
  • Chapter 7, Policy, Mandate and Rules of Engagement: GV.PO
  • Chapter 8, Oversight and AI Supply Chain Risk: GV.OV, GV.SC
  • Chapter 9, Asset Management for an Estate That Includes AI: ID.AM
  • Chapter 10, AI-Assisted Threat Modelling and Risk Assessment: ID.RA
  • Chapter 11, Vulnerability Discovery and Exposure Management at Machine Speed: ID.RA, PR.PS
  • Chapter 12, Adversary Emulation and Continuous Red Teaming with AI: ID.IM
  • Chapter 13, Red Teaming AI Systems and Agents: ID.RA, ID.IM
  • Chapter 14, Identity, Authentication and Access for People, Agents and Machines: PR.AA
  • Chapter 15, Awareness and Training: Resilience to AI-Generated Deception: PR.AT
  • Chapter 16, Data and Platform Security with and for AI: PR.DS, PR.PS
  • Chapter 17, Technology Infrastructure Resilience Against Machine-Speed Attacks: PR.IR
  • Chapter 18, The AI-Assisted Security Operations Centre: DE.CM, DE.AE
  • Chapter 19, Detection Engineering, Threat Intelligence and Deception as Code: DE.CM, DE.AE
  • Chapter 20, Incident Management and Analysis with AI: RS.MA, RS.AN
  • Chapter 21, Incident Reporting, Communication and Mitigation: RS.CO, RS.MI
  • Chapter 22, Recovery Plan Execution with AI: From Incident to Restored Operations: RC.RP
  • Chapter 23, Recovering AI Systems and Security AI: RC.RP
  • Chapter 24, Proactive Recovery: Recoverability, Rehearsal and Communication: RC.RP, RC.CO
  • Chapter 25, Security Chaos Engineering with AI: Verifying Security Capabilities Continuously: ID.IM
  • Chapter 26, Purple Teaming, Measurement and Continuous Improvement: ID.IM, GV.OV