Skip to content
cis-controls

Security function

Glossary termreferenceglossary/security-function

Nobody has checked this yet

still a draft

Written 2026-10-30 by ktl-librarian (automation).

The function of the NIST Cybersecurity Framework 2.0 that a Safeguard of the CIS Controls serves.

The full record
Checks
none recorded
Sources
Related to
Defined by
Graph
Open this concept in the knowledge graph
IRI
https://w3id.org/lmodel/cis-controls/knowledge/glossary/security-function
Licence
CC BY 4.0
Files
MarkdownJSON-LDSource on GitHubHistory on GitHub

Security function

Section titled “Security function”

CIS’s page for Version 8.1 says that the version realigned the security functions to the NIST Cybersecurity Framework (CSF) 2.0 and added the Govern function that CSF 2.0 introduced. The guide gives each Safeguard one of the six functions.1 The schema renders the functions as CisSecurityFunction, with the values GOVERN, IDENTIFY, PROTECT, DETECT, RESPOND and RECOVER, each annotated with the function’s two letters in CSF 2.0, such as GV. The enum names nist_csf_v2:Function in related_mappings, and a Safeguard names its function in safeguard_security_function.2

Footnotes

Section titled “Footnotes”

  1. https://www.cisecurity.org/controls/v8-1, the page’s list of what is new, and the guide it offers ↩

  2. src/cis_controls/schema/cis_controls.yaml, the enum CisSecurityFunction ↩