Frequently Asked Questions

Has the CCII Tool been updated with the changes in NIST CSF 1.1 update?
Yes - The CCII Tool has been updated to reflect the updates to the NIST Cybersecurity Framework Version 1.1.

Are all questions listed in the Target Profile Questionnaire mandatory?
Although extensive, answering all of the questions in the Target Profile ensures that the agency has a complete goal for their cybersecurity program. Including things that are already accomplished allows it to be accurately scored against your current profile and the score will change as things are enacted.

How long should it take to complete all seven steps of the cybersecurity framework?
There is no set time line as to how long it should take to complete the steps. This falls heavily on how great of detail the agency chooses to go into, agency size and complexity of the environment.