<aside>

A free, 1-environment Notion tracker for the Govern function of NIST CSF 2.0 (31 subcategories). Built by The Security Gator. Duplicate it, run it, take it to your next risk review.

</aside>

Govern QuickStart

Govern is the layer every other CSF function hangs from. Get it wrong and Identify, Protect, Detect, Respond, and Recover all wobble on top of it. This template gives you a clean, opinionated place to track all 31 Govern subcategories for a single environment — your own org, one client, one site — with nothing fancier than a checkbox and a notes field. That's deliberate. Anything more would be the paid version.

Built on NIST CSF 2.0 (final, Feb 2024). No legal advice, no compliance guarantee — this is a working tracker, not a certification.

How to Use

<aside>

• Click "Duplicate" at the top right of this page → choose your workspace. </aside>

<aside>

• Open the database below. Rename the "Environment" column to your own org name if you want. </aside>

<aside>

• For each subcategory, check "Implemented" when you have a working control + evidence. Use the "Notes" column to write the one-sentence "How" or link to the evidence. </aside>

<aside>

• Re-run the tracker monthly. The whole point of Govern is rhythm. </aside>

<aside>

• When you outgrow this — when one environment isn't enough, or you want maturity scoring, evidence linking, policy starters, or a board report — see the upgrade section at the bottom. </aside>

Govern Tracker - [Environment]