Wrong claim
Why it feels true
A completed grid of categories looks finished, and the word framework sounds like a certificate.
Precise correction
NIST CSF 2.0 (CSWP 29, final 26 February 2024) is a language for outcomes, Organizational Profiles, and Tiers.
It does not issue a certificate, and a filled spreadsheet of categories is not evidence that TrackPort exports are protected.
Riverstone still needs an owner, a dated profile for one system, and a record such as a restore test or an MFA enrollment report. The framework cards spell out what a certificate, when one exists, does and does not cover.
NIST CSWP 29: The NIST Cybersecurity Framework (CSF) 2.0, final 2024-02-26 ↗
MINI-CHECK