Turn all 106 NIST CSF 2.0 outcomes into a practical maturity assessment, dashboard and prioritised improvement plan. For a quick demo, follow this link.
 
NIST publishes the Cybersecurity Framework 2.0 for free, and it is genuinely good. What it does not give you is a scoring model, assessment workbook, dashboard, or a simple way to turn 106 cybersecurity outcomes into a program of work.
 
This tool does.
 
The SRMBOK NIST CSF 2.0 Assessment Tool is a ready-to-use Excel workbook covering all 106 NIST CSF 2.0 Subcategories across Govern, Identify, Protect, Detect, Respond and Recover.
Each Subcategory includes the official NIST outcome statement, condensed implementation guidance, a plain-English assessment question and a reference back to the relevant NIST material.
Rate each outcome from 0 to 5 using a CMMI-style maturity scale, record the strength of your supporting evidence, set your target maturity and let the workbook do the rest.
 
From assessment to action
 
The live Dashboard shows your overall maturity, Function and Category scores, gaps against target, assessment completion and evidence confidence.
The Priority Action Plan automatically identifies and ranks your 40 largest maturity gaps, including the relevant NIST outcome and suggested improvement focus, with fields for actions, owners, due dates and status.
 
Instead of finishing with: “Here is your maturity score.”
You finish with: “Here is what we need to do first.”
 
A one-page Executive Report turns the assessment into something you can put in front of executives, boards, and steering committees without asking them to open the workbook.
 
And because maturity matters most when it changes, the History function lets you record up to eight assessment snapshots and track progress across every NIST Function over time.
Two complete workbooks included
 
Your download includes:
The Assessment Tool. A clean workbook ready for your organisation’s first assessment.
A Completed Worked Example. The same workbook completed end to end for a fictional utility, with all 106 Subcategories assessed, evidence and confidence recorded, Function targets established and four quarterly snapshots already populated.
 
The worked example gives you a scoring reference, lets you demonstrate the finished output before beginning an assessment, and shows every formula, chart, ranking and report working before you enter a single piece of your own data.
 
Inside the tool
All 106 NIST CSF 2.0 Subcategories
0–5 CMMI-style maturity scoring
Approximate alignment with NIST Tiers
Evidence-confidence ratings
Default and individual Function maturity targets
Overall, Function and Category scoring
Live maturity and gap Dashboard
Top 10 priority gaps
Automated 40-item Priority Action Plan
One-page Executive Report
Eight-snapshot maturity history and trend analysis
Category-level Maturity Guide
Standards mapping to ISO 27001, ISO 31000, Australian ISM, PSPF, Essential Eight, UK NCSC CAF and Cyber Essentials
NIST references, page finder and FAQ
Completed worked example
 
Plain Excel. No macros. No add-ins. No login.
 
Yellow cells show where you enter information. Light blue cells are calculated automatically. Sheets are protected without passwords to prevent accidental changes while remaining completely editable if you want to customize the tool.
 
Who is it for?
 
Designed for CISOs, security managers, risk managers, consultants and internal audit teams who need more than a maturity score.
 
Use it to establish a baseline, identify priorities, build an improvement program, track progress and explain cyber maturity clearly to senior management. 
 
It works as a standalone assessment tool for organizations without a GRC platform, or alongside an existing GRC system.
 
The NIST CSF spreadsheet you were probably about to build yourself — already built, tested and supplied with a complete worked example.
 
Excel assessment tool + completed worked example (.zip) · Instant download · Licensed for use within a single organization. if you would like to see how it works or run a free general assessment of a web-based version of the spreadsheet, just visit this link.
 
Also included in the SRMBOK Guides and Templates subscription.