Skip to content
{'Analytics and Reporting solutions for GRC': 'Policy and Compliance Management'} › Policy and Compliance Management › Governance › Risk › and Compliance
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

NIST Cybersecurity Framework Overview dashboard

NIST Cybersecurity Framework Overview dashboard contains a variety of reports displayed on different dashboards, available within each of the sections in the NIST CSF process.

Important: Starting with version 18.1.0 of the Policy and Compliance Management application, the NIST Cybersecurity Framework Overview dashboard is available in the Next Experience UI Framework.

If you are on Vancouver or Washington DC, you can view the dashboard in the Next Experience UI Framework.

To view the dashboard in classic UI, see NIST CSF Use Case Accelerator dashboards and reports.

Image omitted: nist-csf-pa-db-pc.png
NIST Cybersecurity Overview dashbaord in the Next Experience UI Framework.

Required ServiceNow AI Platform roles

  • NIST CSF Risk Executive (sn_irm_nist_csf.risk_executive), to view all the reports in the dashboard.
  • Sys admin, to edit data in the dashboard.

Access the NIST Cybersecurity Framework dashboard

To open the dashboard, navigate to All > NIST CSF > Analytics Overview.

Reports

TitleTypeDescription
Framework CoreBar chartProvides an overview of the Cybersecurity policies organized by the NIST CSF functions.
Critical TargetsBar chartProvides an overview of critical targets by entity class or tiers.
Critical Targets lacking Cybersecurity activitiesBar chartProvides an overview of critical targets that lack cybersecurity activities by entity class or tiers.
Current Cybersecurity activitiesBar chartProvides an overview of currently performed cybersecurity activities by entity class, entities, or cybersecurity functions.
Desired Cybersecurity activitiesBar chartProvides an overview of desired cybersecurity activities by entity class, entities, or cybersecurity functions.
Gaps Analysis SummaryListProvides a summary of gaps, non-compliant controls, risks, issues failed indicators, and action plans for targets grouped by cybersecurity, cybersecurity functions, or the targets themselves.

Parent Topic:Analytics and Reporting solutions for GRC: Policy and Compliance Management