NIST CSF 2.0 Gap Assessment: Meridian Wealth Partners
Overview
A cybersecurity risk management and maturity assessment of Meridian Wealth Partners, a simulated wealth management firm, against the six core functions of NIST CSF 2.0: Govern, Identify, Protect, Detect, Respond and Recover.
Key findings
- Protect showed localized maturity, reflecting existing regulatory work (GLBA Safeguards Rule, KYC/AML safeguards).
- Govern and Detect had critical gaps: no formal board-level cyber oversight, no Supply Chain Risk Management (SCRM) policy, and no continuous monitoring.
- Delivered prioritized remediation recommendations to close the highest-risk gaps first.
The deliverable
