NIST CSF 2.0 Protect Function: Access, Data, Platforms & Resilience

What the Protect Function Covers

Identity, authentication, and access control; awareness and training; data confidentiality, integrity, and availability; platform (hardware, software, and services) security; and technology infrastructure resilience — including networks, capacity, and mechanisms for normal and adverse situations.

Protect Categories (Official CSF 2.0)

Source: NIST CSWP 29, Table 1 / Appendix A — 5 Categories.

Why Protect Matters

PR.AA replaces the retired PR.AC label — use 2.0 IDs in crosswalks. PR.PS (configuration, patching, logging, unauthorized software, secure SDLC) and PR.IR are where hardening and resilience meet continuous assurance. Protect outcomes are what CIS Benchmarks and identity programs often evidence against in dual-framework programs.

How CyberSilo Helps Operationalize Protect

• Compliance Standards Automation — CIS Benchmark and configuration evidence mapped to PR.PS; access-policy evidence to PR.AA
• CIS Benchmarking Tool — continuous hardening scores that support platform security outcomes
• ThreatHawk SIEM — authentication and platform logs for continuous assurance of Protect controls
• Agentic SOC AI — secondary for Protect; stronger fit for Detect and Respond

Frequently Asked Questions

Is PR.AC still valid in CSF 2.0?

No. CSF 1.1 PR.AC was replaced by Identity Management, Authentication, and Access Control (PR.AA) in CSF 2.0. Use PR.AA in crosswalks and Profiles.

Where do backups sit in Protect?

Data backups are covered under Data Security — for example PR.DS-11 (backups of data are created, protected, maintained, and tested) in CSWP 29 Appendix A.

How does Protect differ from Recover?

Protect uses safeguards to prevent or lower the likelihood and impact of adverse cybersecurity events. Recover restores assets and operations after a cybersecurity incident. Both should be planned under Govern and informed by Identify.

Related CSF 2.0 Function Guides

Govern · Identify · Detect · Respond · Recover