Detect & Protect Function Coverage

Scope: CSF 2.0 has 106 subcategories across six functions (Govern, Identify, Protect, Detect, Respond, Recover). Nine subcategories genuinely evidenced by log content are mapped below, concentrated in Detect's Continuous Monitoring and Adverse Event Analysis categories and Protect's Identity Management, Authentication, and Access Control category — the same ground CC6/CC7 cover on the SOC 2 page. Govern's 31 subcategories, most of Identify, and the Respond/Recover functions are governance, risk-strategy, and incident-program questions — named honestly in the gap section rather than force-mapped.

Sourcing: NIST CSF 2.0 (NIST CSWP 29) is a U.S. government publication and is public domain, unlike SOC 2's AICPA material. The summaries below are still this site's own paraphrase, for the same reason every other framework here is paraphrased rather than quoted directly.