← NIST CSF 2.0 in plain English

ID.IM-02

Identify / Improvement

Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties.

Think of it likeConducting a fire drill with the family and making adjustments based on the results.

In plain English

The family practices emergency procedures and makes improvements based on how well they perform during the drill.

Related CIS safeguards (unofficial mapping)

CIS 17.7: Conduct Routine Incident Response ExercisesCIS 18.1: Establish and Maintain a Penetration Testing ProgramCIS 18.2: Perform Periodic External Penetration TestsCIS 18.3: Remediate Penetration Test FindingsCIS 18.4: Validate Security MeasuresCIS 18.5: Perform Periodic Internal Penetration Tests