glacierr
glacierr
service · 01nist csf 2.0
know where you really stand.
We assess your security programme against all 106 outcomes of NIST CSF 2.0 and leave you with a scored baseline, a clear risk picture and a roadmap the board can act on.
weeks, start to board read-out
CSF 2.0 outcomes scored against evidence
fixed fee, agreed up front
01what changes for you
Every outcome scored against evidence, not questionnaire answers — and every roadmap item tied to a gap and a risk, or accepted on the record.
Every outcome scored 0–5 against evidence, not questionnaire answers.
The Govern function in full — appetite, roles, oversight, supply chain.
Threats mapped to MITRE ATT&CK and a heat map of what you carry.
Every roadmap item linked to a gap and a risk — or accepted on the record.
An evidenced position for the questionnaire, the renewal or the auditor.
Senior consultants only. No day-rate creep, no transformation programme.
02what we typically find
Most organisations can list their security tools. Far fewer can tell the board how mature the programme actually is, where the gaps are and what closing them is worth. Budgets get argued on opinion, risk is accepted informally, and governance gaps sit quietly until an incident, an auditor or an insurer finds them.
03our approach
Four stages, each with a gate you sign. Senior consultants only — the people who scope are the people who deliver.
agree what "good" looks like
look hard
score against evidence
a roadmap the board can act on
04what you get
05who it's for
A plain answer to "how secure are we?"
A defensible basis for security spend.
A roadmap that fits the technology plan.
An independent baseline to argue from.
Sources: DSIT, Cyber Security Breaches Survey 2025/26 (30 April 2026); NIST CSWP 29, The NIST Cybersecurity Framework (CSF) 2.0 (26 February 2024); DSIT, Cyber Governance Code of Practice (April 2025).
Fixed scope, fixed fee — typically four to six weeks. Tell us the framework, the window and the scope on the first call; we come back inside a week with a proposal.