CPAtoCybersecurity

CPAtoCybersecurity/csf_profile

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

45 stars 27 forks 45 watchers JavaScript MIT License

audit compliance csf cybersecurity cybersecurity-framework governance-risk-compliance grc nist nist-csf nist-csf-2 react risk-assessment risk-management security-assessment self-hosted

View on GitHub Website

48 Open Issues Need Help Last updated: Jul 7, 2026

Open Issues Need Help

View All on GitHub

Design tokens: replace remaining raw hex literals with the :root token system 2 days ago

enhancement good first issue

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Docs: add GET_THE_SPREADSHEETS/README.md and refresh SCREENSHOTS.md to the terminal UI 2 days ago

documentation good first issue

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Add beforeunload warning for unsaved changes 27 days ago

enhancement good first issue

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Enhance PR.IP Test Procedures with Detailed Test Steps and Pass/Fail Criteria 27 days ago

documentation good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

RC.CO - Incident Recovery Communication: Contribute case study test steps and artifacts 27 days ago

good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

RC.RP - Incident Recovery Plan Execution: Contribute case study test steps and artifacts 27 days ago

good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

RS.CO - Incident Response Reporting and Communication: Contribute case study test steps and artifacts 27 days ago

good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

RS.MI - Incident Mitigation: Contribute case study test steps and artifacts 27 days ago

good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

RS.MA - Incident Management: Contribute case study test steps and artifacts 27 days ago

good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

RS.AN - Incident Analysis: Contribute case study test steps and artifacts 27 days ago

good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

DE.CM - Continuous Monitoring: Contribute case study test steps and artifacts 27 days ago

good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

PR.IR - Technology Infrastructure Resilience: Contribute case study test steps and artifacts 27 days ago

good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

PR.PS - Platform Security: Contribute case study test steps and artifacts 27 days ago

good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

PR.IP - Implementation and Processes: Contribute case study test steps and artifacts 27 days ago

good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

PR.AT - Awareness and Training: Contribute case study test steps and artifacts 27 days ago

good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

ID.IM - Improvement: Contribute case study test steps and artifacts 27 days ago

good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

ID.RA - Risk Assessment: Contribute case study test steps and artifacts 27 days ago

good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

GV.SC - Supply Chain Risk Management: Contribute case study test steps and artifacts 27 days ago

good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

GV.OV - Oversight and Governance: Contribute case study test steps and artifacts 27 days ago

good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

GV.PO - Policy, Processes, and Procedures: Contribute case study test steps and artifacts 27 days ago

good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

GV.OC - Organizational Context: Contribute case study test steps and artifacts 27 days ago

good first issue non-code csf-2.0

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Backend Endpoints - Express/Node.js 3 months ago

good first issue atlassian-integration

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Evidence Completeness Tracker 4 months ago

enhancement good first issue Phase 1: Quick Wins dashboard

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Gap Prioritization Matrix 4 months ago

enhancement good first issue Phase 1: Quick Wins dashboard

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Quarterly Trend Visualization 4 months ago

enhancement good first issue Phase 1: Quick Wins dashboard

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Create Consistent Status Badge System 4 months ago

enhancement good first issue Phase 0: Visual Sprint ui/ux

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Clean Up Boilerplate and Dead CSS 4 months ago

enhancement good first issue Phase 0: Visual Sprint ui/ux tech debt

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Install Design System Foundation (Inter Font + Design Tokens) 4 months ago

enhancement good first issue Phase 0: Visual Sprint ui/ux

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

ID.AM - Asset Management: Contribute case study test steps and artifacts 4 months ago

good first issue

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Docker Security Hardening Guide 5 months ago

documentation good first issue security

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

PR.DS - Data Security: Contribute case study test steps and artifacts 5 months ago

good first issue

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

UI - Confluence Links in Controls View 5 months ago

enhancement good first issue atlassian-integration

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Implement Basic User Authentication 6 months ago

enhancement good first issue security

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Implement Password-Protected Export Functionality 6 months ago

enhancement good first issue security

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

DE.AE - Adverse Event Analysis: Contribute case study test steps and artifacts 6 months ago

good first issue

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

PR.AA - Identification, Authentication, and Access Management: Contribute case study test steps and artifacts 6 months ago

good first issue

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

GV.RM - Risk Management Strategy: Contribute case study test steps and artifacts 6 months ago

good first issue

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Create Jira Issues from CSF Assessment Findings 6 months ago

enhancement good first issue atlassian-integration

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Jira Cloud API Authentication & Configuration 6 months ago

enhancement good first issue atlassian-integration

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Add Confluence Cloud API authentication and configuration 6 months ago

enhancement good first issue atlassian-integration

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Environment Variables & Security 6 months ago

documentation good first issue security atlassian-integration

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Sync Jira Remediation Status Back to CSF App 6 months ago

enhancement good first issue atlassian-integration

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

UI - Jira Issue Tracking in Assessments 6 months ago

enhancement good first issue atlassian-integration

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Fetch Confluence Control Descriptions 6 months ago

enhancement good first issue atlassian-integration

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Configuration & Documentation 6 months ago

documentation good first issue atlassian-integration

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Proof of Concept Setup: Free Tier Jira & Confluence Cloud 6 months ago

good first issue atlassian-integration

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Security Audit and Dependency Updates 6 months ago

good first issue security maintenance

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted

Add JSON Export Option Alongside CSV Export 6 months ago

enhancement good first issue

CPAtoCybersecurity/csf_profile

45

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

JavaScript

#audit#compliance#csf#cybersecurity#cybersecurity-framework#governance-risk-compliance#grc#nist#nist-csf#nist-csf-2#react#risk-assessment#risk-management#security-assessment#self-hosted