NIST CSF Implementation Workbook - v1.1 & v2.0
Designed and built a comprehensive NIST CSF 2.0 implementation workbook covering all six functions including the new Govern function - used as the governance instrument for the flagship program build.
The flagship program build (Project 00) required a rigorous assessment and governance instrument that could track maturity across the full NIST CSF, map to ISO 27001 controls, generate gap analysis automatically, and produce board-presentable output. Commercial GRC platforms were out of budget. NIST CSF 1.1 had just been superseded by version 2.0, which added the Govern function - meaning off-the-shelf workbooks were already outdated.
I built a comprehensive Excel-based implementation workbook from scratch covering NIST CSF v1.1 (five functions, 108 subcategories) and v2.0 (six functions including Govern). Each subcategory has a maturity score (1–5), implementation status, responsible owner, target date, and evidence artifact reference. The workbook includes automated gap analysis generating a prioritized remediation roadmap, cross-reference columns mapping to ISO 27001:2022 Annex A controls, a board-presentable executive dashboard showing function-level maturity scores and trend, and a 37-item evidence register linking each artifact to the subcategories it satisfies.