Endpoint & XDR · Security Programs
CrowdStrike Falcon for NIST Cybersecurity Framework (1.1, legacy)
What CrowdStrike Falcon’s data evidences toward NIST Cybersecurity Framework (1.1, legacy) today, and how to connect it.
What CrowdStrike Falcon evidences here
- Endpoint inventory feeds Identify (ID)
This is where CrowdStrike Falcon’s data is documented as relevant on our NIST Cybersecurity Framework (1.1, legacy) page — not a pre-built, automatic control mapping. You configure which controls it maps to inside CMDash.
How you connect CrowdStrike Falcon
Pulls managed hosts, detections, and host vulnerabilities from Falcon so endpoint-protection controls are evidenced by live agent coverage rather than a spreadsheet.
About NIST Cybersecurity Framework (1.1, legacy)
Kept for programs still reporting against 1.1 during the move to 2.0.
Legacy. New programs should start on CSF 2.0.
Read the full NIST Cybersecurity Framework (1.1, legacy) page →