Aligning your security practice with a standard like NIST CSF involves making sure your business adheres to the many component parts of the standard.

It may suit your business to complete the work of aligning to the standard without an external audit, or you might decide it is important to go a step further and engage an auditor to provide external assurance of your alignment to the standard. Either way, you'll need a clear plan to identify and implement all that's required.