What is the NIST Cybersecurity Framework (CSF) 2.0?
Short answer
NIST CSF 2.0 is voluntary guidance for managing cybersecurity risk, organized into six functions: Govern, Identify, Protect, Detect, Respond and Recover. Version 2.0 added the Govern function and broadened the framework to organizations of every size and sector.
The details
Organizations use CSF profiles to describe their current and target state, then plan the gap. NIST publishes quick-start guides, including one for small businesses.
Terms explained
- NIST Cybersecurity Framework
- The NIST Cybersecurity Framework (CSF) 2.0 is voluntary guidance for managing cybersecurity risk, organized into six functions: Govern, Identify, Protect, Detect, Respond and Recover.
Sources
Related questions
Related Guides
GuideGRC
NIST AI RMF: Implementation Guide for Small Teams
Learn how small teams can implement the NIST AI RMF to assess risk, govern deployments, and deploy artificial intelligence safely without enterprise overhead.
Read more GuideGRC
How to Conduct a Cybersecurity Risk Assessment in 7 Steps
A step-by-step method for information security risk assessment aligned with ISO 27005 and NIST SP 800-30: assets, threats, likelihood and impact scoring, risk appetite, treatment and the risk register.
Read more GuideGRC
How to Do a DPIA: A Step-by-Step Security and Privacy Guide
Learn how to do a DPIA step by step. Identify privacy risks, assess necessity and proportionality, and implement controls to protect personal data.
Read more GuideGRC
8 Essential Small Business Security Policies to Protect Operations
Establish baseline defense with 8 essential small business security policies covering backups, access control, patching, incident response, and AI use.
Read more