Turn all 106 NIST CSF 2.0 outcomes into a maturity assessment, a dashboard and a ranked improvement plan, in plain Excel.
 
Try it before you buy it. The complete workflow runs free in your browser at nist.srmbok.com, with a worked example you can load and a blank mode you can fill in. Use it with non-sensitive sample data to see exactly what the tool does. When you are ready to assess your own organization, this Excel edition keeps the data in your environment, under your control, with no login and no browser session to lose.
 
NIST publishes the Cybersecurity Framework 2.0 for free, and it is genuinely good. What it does not give you is a scoring model, an assessment workbook, a dashboard, or a simple way to turn 106 cybersecurity outcomes into a program of work. This tool does.
 
The SRMBOK NIST CSF 2.0 Assessment Tool is a ready-to-use Excel workbook covering all 106 NIST CSF 2.0 Subcategories across Govern, Identify, Protect, Detect, Respond and Recover. Each Subcategory includes the official NIST outcome statement, condensed implementation guidance, a plain-English assessment question and a reference back to the relevant NIST material. Rate each outcome from 0 to 5 on a CMMI-style maturity scale, record the strength of your supporting evidence, set your target maturity and let the workbook do the rest.
 
From assessment to action
The live Dashboard shows overall maturity, Function and Category scores, gaps against target, assessment completion and evidence confidence. The Priority Action Plan automatically identifies and ranks your 40 largest maturity gaps, including the relevant NIST outcome and suggested improvement focus, with fields for actions, owners, due dates and status. Instead of finishing with “Here is your maturity score,” you finish with “Here is what we need to do first.”
 
A one-page Executive Report turns the assessment into something you can put in front of executives, boards and steering committees without asking them to open the workbook. And because maturity matters most when it changes, the History function records up to eight assessment snapshots and tracks progress across every NIST Function over time.
 
Two complete workbooks included
The Assessment Tool: a clean workbook ready for your organization’s first assessment.
A Completed Worked Example: the same workbook completed end to end for a fictional utility, with all 106 Subcategories assessed, evidence and confidence recorded, Function targets set and four quarterly snapshots populated.
The worked example gives you a scoring reference, lets you demonstrate the finished output before beginning, and shows every formula, chart, ranking and report working before you enter a single piece of your own data.
 
Inside the tool
All 106 NIST CSF 2.0 Subcategories
0 to 5 CMMI-style maturity scoring, with approximate alignment to NIST Tiers
Evidence-confidence ratings
Default and individual Function maturity targets
Overall, Function and Category scoring
Live maturity and gap Dashboard, with top 10 priority gaps
Automated 40-item Priority Action Plan
One-page Executive Report
Eight-snapshot maturity history and trend analysis
Category-level Maturity Guide
Standards mapping to ISO 27001, ISO 31000, Australian ISM, PSPF, Essential Eight, UK NCSC CAF and Cyber Essentials
NIST references, page finder and FAQ
 
Plain Excel. No macros. No add-ins. No login. Yellow cells are for your input, light blue cells are calculated. Sheets are protected without passwords, so nothing breaks by accident and everything stays editable if you want to customize it.
 
Who it is for
CISOs, security managers, risk managers, consultants and internal audit teams who need more than a maturity score. Use it to establish a baseline, identify priorities, build an improvement program, track progress and explain cyber maturity clearly to senior management. It works on its own for organizations without a GRC platform, or alongside one.
 
The NIST CSF spreadsheet you were probably about to build yourself: already built, tested and supplied with a complete worked example.
 
Excel assessment tool plus completed worked example, delivered as a zip. Instant download. Licensed for use within a single organization.
 
Included in the SRMBOK Library at the Complete level. Compare Library plans.