There are 23 categories under the NIST Cybersecurity Framework (CSF), divided into five core functions: Identify, Protect, Detect, Respond, and Recover.