Also under NIST CSF 2.0, the researchers called out low coverage of supply chain risk management (52%, under the “govern” function) and asset management (53%, under the “identify” function).

Surveys highlights increased focus on alternative investments, operational efficiency, liquidity and risk management.