The National Institute of Standards and Technology (NIST) provides a Cybersecurity Framework (CSF) for benchmarking and measuring the maturity level of cyber security programs across all industries. The City uses this framework and toolset to measure and report on its internal cyber security program.

The foundation for this measure is the Framework Core, a set of cybersecurity activities, desired outcomes and applicable references that are common across critical infrastructure/industry sectors. These activities come from the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) published standard, along with the information security and customer privacy controls it references (NIST 800 Series Special Publications). The Framework Core presents industry standards, guidelines, and practices in a manner that allows for communication of cybersecurity activities and outcomes across the organization from the executive level to the implementation/operations level.  

The Framework Core consists of five concurrent and continuous functions – identify, protect, detect, respond, and recover.  When considered together, these functions provide a high-level, strategic view of the lifecycle of an organization’s management of cybersecurity risk.  The Framework Core identifies underlying key categories and subcategories for each function, and matches them with example references, such as existing standards, guidelines and practices for each subcategory. 

This page provides data for the Cybersecurity performance measure.

Cybersecurity Framework (CSF) scores by each CSF category per fiscal year quarter (Performance Measure 5.12)

The performance measure dashboard is available at 5.12 Cybersecurity.

Additional Information

Source: Maturity assessment /https://www.nist.gov/topics/cybersecurity

Contact: Scott Campbell

Contact E-Mail: Scott_Campbell@tempe.gov

Data Source Type: Excel

Preparation Method: The data is a summary of a detailed and confidential analysis of the city's cyber security program. Maturity scores of subcategories within NIST CFS are combined, averaged and rolled up to a summary score for each major category.

Publish Frequency: Annual

Publish Method: Manual

Data Dictionary