Question: how many controls are there in nist csf?
Answer: NIST Cybersecurity Framework overview The core comprises five functions, which are subdivided into 22 categories (groups of cyber security outcomes) and 98 subcategories (security controls).