[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-353150-105":53,"doc-detail-353150-en":126},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":119,"head_meta":121,"extra_data":123,"updated_unix":125},105,"en","nist-cybersecurity-framework-policy-template-guide-version-2111-online","NIST Cybersecurity Framework Policy Template Guide - Version 2.11.1 - online","","Provides a policy template guide aligned to the NIST Cybersecurity Framework (NIST CSF) for use by MS-ISAC members and participants of the Nationwide Cybersecurity Review. Maps 49 NIST CSF subcategories (e.g., ID.AM, PR.AC, DE.AE, RS.RP, RC.IM) to corresponding policy and standard templates. Includes guidance on customizing templates as an organizational policy outline and clarifies disclaimer and baseline-use limitations.",{"@graph":63,"@context":118},[64,80,101],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":36,"@type":70,"position":76},"https://docshare.wps.com/template/forms/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/nist-cybersecurity-framework-policy-template-guide-version-2111-online/353150/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/nist-cybersecurity-framework-policy-template-guide-version-2111-online/353150.png","ImageObject",442,249,{"name":88,"@type":89},"Levi","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-23","2026-09-22",true,{"@type":98,"interactionType":99,"userInteractionCount":76},"InteractionCounter",{"@type":100},"ViewAction",{"@type":102,"mainEntity":103},"FAQPage",[104,110,114],{"name":105,"@type":106,"acceptedAnswer":107},"What is the purpose of the NIST Cybersecurity Framework Policy Template Guide?","Question",{"text":108,"@type":109},"It serves as a resource to help participants apply and advance cybersecurity policies by aligning policy templates to NIST CSF subcategories.","Answer",{"name":111,"@type":106,"acceptedAnswer":112},"How does the guide relate NIST CSF subcategories to policy templates?",{"text":113,"@type":109},"Each NIST subcategory is represented by text like “ID.AM-5,” which corresponds to specific policy and standard templates listed for that subcategory.",{"name":115,"@type":106,"acceptedAnswer":116},"Can organizations customize the provided policy templates?",{"text":117,"@type":109},"Yes. The templates are provided as an outline that can be customized, with additional details added by the end user.","https://schema.org",{"og:url":78,"og:type":120,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":122,"canonical":78},"index,follow",{"doc_id":124,"site_id":56},353150,1792195769,{"code":4,"msg":5,"data":127},{"doc_id":124,"user_id":128,"nickname":88,"user_avatar":129,"doc_module":9,"category_id":35,"category_name":36,"doc_title":59,"doc_description":61,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":76,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":135,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":140,"read_time":47},7971461740909,"https://ap-avatar.wpscdn.com/davatar_155a257f0dc6eb9ab79c44ca47cae57d","NIST Cybersecurity Framework  \nPolicy Template Guide  \nContents  \nIntroduction 1  \nNIST Function: Identify 2  \nIdentify: Asset Management (ID.AM) 2  \nIdentify: Risk Management Strategy (ID.RM) 2  \nIdentify: Supply Chain Risk Management (ID.SC) 2  \nNIST Function: Protect 4  \nProtect: Identity Management and Access Control (PR.AC) 4  \nProtect: Awareness and Training (PR.AT) 4  \nProtect: Data Security (PR.DS) 4  \nProtect: Information Protection Processes and Procedures (PR.IP) 5  \nProtect: Maintenance (PR.MA) 6  \nProtect: Protective Technology (PR.PT) 6  \nNIST Function: Detect 7  \nDetect: Anomalies and Events (DE.AE) 7  \nDetect: Security Continuous Monitoring (DE.CM) 7  \nDetect: Detection Processes (DE.DP) 7  \nNIST Function: Respond 8  \nRespond: Response Planning (RS.RP) 8  \nRespond: Communications (RS.CO) 8  \nRespond: Analysis (RS.AN) 9  \nRespond: Improvements (RS.IM) 9  \nNIST Function: Recover 10  \nRecover: Recovery Planning (RC.RP) 10  \nRecover: Improvements (RC.IM) 10  \nRecover: Communications (RC.CO) 10  \nIntroduction  \nThe Multi-State Information Sharing & Analysis Center (MS-ISAC) is offering this guide to participants of the Nationwide Cybersecurity Review (NCSR) and MSISAC members, as a resource to assist with the application and advancement of cybersecurity policies.  \nThe policy templates are provided courtesy of the State of New York and the State of California. The templates can be customized and used as an outline of an organizational policy, with additional details to be added by the end user.  \nThe NCSR question set represents the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF) . This guide gives the correlation between 49 of the NIST CSF subcategories, and applicable policy and standard templates. A NIST subcategory is represented by text, such as “ID.AM-5 .” This represents the NIST function of Identify and the category of Asset Management.  \nFor additional information on services provided by the Multi-State Information Sharing & Analysis Center (MS-ISAC), please refer to the following page: [https://](https://)[ ](https://)[www.cisecurity.org/ms-isac/services/](www.cisecurity.org/ms-isac/services/. These)[. These](www.cisecurity.org/ms-isac/services/. These) policy templates are also mapped to the resources MS-ISAC and CIS provide, open source resources, and free FedVTE training: [https://www.cisecurity.org/wp-content/uploads/2019/11/Cybersecurity](https://www.cisecurity.org/wp-content/uploads/2019/11/Cybersecurity)Resources-Guide.pdf.  \nDisclaimer: These policies may not reference the most recent applicable NIST revision, however may be used as a baseline template for end users. These policy templates are not to be used for profit or monetary gain by any organization.  \nNIST FUNCTION:  \nIdentify  \nIdentify: Asset Management (ID.AM)  \nID.AM-1 Physical devices and systems within the organization are inventoried.  \nAcceptable Use of Information Technology Resource Policy  \nAccess Control Policy  \nAccount Management/Access Control Standard  \nIdentification and Authentication Policy  \nInformation Security Policy  \nSecurity Assessment and Authorization Policy  \nSecurity Awareness and Training Policy  \nID.AM-2 Software platforms and applications within the organization are inventoried.  \nAcceptable Use of Information Technology Resource Policy  \nAccess Control Policy  \nAccount Management/Access Control Standard  \nIdentification and Authentication Policy  \nInformation Security Policy  \nSecurity Assessment and Authorization Policy  \nSecurity Awareness and Training Policy  \nID.AM-4 External information systems are catalogued.  \nSystem and Communications Protection Policy  \nID.AM-5 Resources (e.g., hardware, devices, data, time, and software) are prioritized based  \non their classification, criticality, and business value).  \nInformation Classification Standard  \nInformation Security Policy  \nID.AM-6 Cybersecurity roles and responsibilities for the entire workforces and third-party stake","cbCaijPw2dDPMsUj","https://ap.wps.com/l/cbCaijPw2dDPMsUj","pdf",232646,13,"English","# Introduction\n## NIST Function: Identify\n## Identify: Asset Management (ID.AM)\n## Identify: Risk Management Strategy (ID.RM)\n## Identify: Supply Chain Risk Management (ID.SC)\n## NIST Function: Protect\n## NIST Function: Detect\n## NIST Function: Respond\n## NIST Function: Recover","[{\"question\":\"What is the purpose of the NIST Cybersecurity Framework Policy Template Guide?\",\"answer\":\"It serves as a resource to help participants apply and advance cybersecurity policies by aligning policy templates to NIST CSF subcategories.\"},{\"question\":\"How does the guide relate NIST CSF subcategories to policy templates?\",\"answer\":\"Each NIST subcategory is represented by text like “ID.AM-5,” which corresponds to specific policy and standard templates listed for that subcategory.\"},{\"question\":\"Can organizations customize the provided policy templates?\",\"answer\":\"Yes. The templates are provided as an outline that can be customized, with additional details added by the end user.\"}]","NIST Cybersecurity Framework Policy Template Guide - Version 2.11.1 - online | PDF",1790103314]