This CSF step involves documenting the existing category and subcategory outcome achievements, by using the implementation status to indicate the degree to which the cybersecurity outcomes defined by the CSF Subcategories are currently being achieved by the organization12. The Current Profile reflects the current cybersecurity posture of the organization, and helps to identify the gaps and opportunities for improvement3 .

References: 1: Cybersecurity Framework Components | NIST 2: Cybersecurity Framework v1.1 - CSF Tools - Identity Digital 3: Implementing the NIST Cybersecurity Framework Using COBIT 2019 | ISACA : REVIEW OF IMPLEMENTING THE NIST CYBERSECURITY FRAMEWORK USING COBIT 2019.