Free working resource
AEGITz NIST CSF 2.0 Small Business Profile
Use NIST CSF 2.0 as a common decision language. Score current and target profiles, weight gaps by business criticality, and work a short, owned priority list.
XLSX
Ready to use
The resource is available without a form.
- Download without an email gate
- Formula cells checked for errors
- Designed for executive and operator use
- Connected to the method behind it
How to use it
Start with evidence. Finish with a decision.
- 01Download and save a working copy.
- 02Complete the inputs with the people who own the process.
- 03Review gaps, assumptions, and scores together.
- 04Turn the result into named actions and owners.
The decision this supports
Use the completed resource to make the next conversation specific.
NIST CSF 2.0 is a common language for describing cyber risk, not a product checklist. A small business should score a current profile, choose a realistic target, weight each gap by business criticality, assign owners to the top three priorities, and rescore annually so the framework drives decisions instead of documentation.
The connected guide explains the reasoning behind the questions, the evidence worth keeping, and the tradeoffs leadership should review before approving work.