A practical self-assessment inspired by the six functions of NIST CSF 2.0 (Govern, Identify, Protect, Detect, Respond, Recover) — not an official NIST scoring methodology or certification. Each function scores 0–4 from the practices checked. Useful for spotting gaps and prioritizing investment, not a substitute for a formal audit.