BSP Circular 1232 · Cybersecurity Maturity Framework
Northgate Union Bank has a complex IT profile, so BSP expects Managed or better in every domain. The CCSA is filed on ASTERisC by March 31 each year.
BSP has not yet published the CCSA reporting template
This draft follows Circular 1232's four tiers across the six NIST CSF 2.0 functions. When BSP releases the guidelines, only the export template changes. The first filing is due 60 days after they are released.
Next filing date
days · Mar 31, 2027
Domains at Managed
1 of 6
Filled tiers are achieved. The outlined tier is the Managed target. A tier counts only when every control at or below it is evidenced.
Identify
2 of 5 evidenced
Clear ID-01 to reach Foundational
Protect
3 of 11 evidenced
Clear PR-06 and 1 more to reach Foundational
Detect
3 of 5 evidenced
Clear DE-01 and 1 more to reach Established
Respond
2 of 2 evidenced
At target
Each domain's current blockers, and the tier the domain reaches once they are cleared. Simulated with the same rule.
Identify
Below Foundational→Foundational
Clear 1 control:
Protect
Below Foundational→Foundational
Clear 2 controls:
Recover
Foundational→Established
Clear 1 control:
Detect
Foundational→Established
Clear 2 controls:
Govern
Established→Managed
Clear 1 control: