NIST Cybersecurity Foundation study guide
NIST Cybersecurity Foundation · Work through your exam, one topic at a time.
The NIST Cybersecurity Foundation credential is designed for professionals who want to understand and apply the NIST Cybersecurity Framework (CSF) within their organizations. It is suitable for IT managers, security analysts, risk officers, and anyone involved in cyber risk management who needs a foundational grasp of the framework's structure and practical use. The exam covers four domains: CSF fundamentals (25%), the five core functions (Identify, Protect, Detect, Respond, Recover) (25%), implementation tiers and profiles (25%), and applying the framework in an organization (25%). Candidates should be able to explain the purpose and components of the CSF, differentiate the core functions, describe how tiers reflect cybersecurity risk management maturity, and outline how profiles are used to align business objectives with security outcomes. The NIST Cybersecurity Foundation study guide has 4 sections and about 1,312 words.
01NIST Cybersecurity Framework fundamentals
This domain tests whether you understand what the NIST Cybersecurity Framework (CSF) is for, how it is built, and what it does not do. Expect questions on the CSF's voluntary, outcome-based nature and on its core components: the CSF Core, Profiles, and Implementation Tiers.
325 words, about 2 min02NIST Cybersecurity Framework core functions
This domain tests the six CSF 2.0 Functions and the outcomes grouped under them. You need to recognize which Function owns an outcome and why the Functions are concurrent, not sequential.
323 words, about 2 min03Implementation tiers and profiles
This domain tests how organizations use Tiers and Profiles to set direction and measure progress. Expect questions that distinguish the two and apply them to a scenario.
329 words, about 2 min04Applying the framework in an organization
This domain tests implementation: scoping, governance, profiling, gap analysis, prioritization, and continuous improvement. Questions often ask what to do first or how to use CSF with existing programs.
335 words, about 2 min