Standard Dynamics 365 is not covered by the NIST CSF, as indicated below. To address security risks, we recommend aligning with the NIST CSF. This addition will enhance the safety of using Dynamics 365.

https://learn.microsoft.com/en-us/compliance/regulatory/offering-nist-csf#microsoft-in-scope-cloud-platforms--services