Cybersecurity glossary
What is NIST Cybersecurity Framework?
Also known as: NIST CSF, CSF 2.0
Definition
The NIST Cybersecurity Framework (CSF) 2.0 is voluntary guidance for managing cybersecurity risk, organized into six functions: Govern, Identify, Protect, Detect, Respond and Recover.
Why it matters
Organizations describe a current and target profile, then plan to close the gap. NIST publishes quick-start guides, including one for small businesses.
Common questions about NIST Cybersecurity Framework
- What is the NIST Cybersecurity Framework (CSF) 2.0?
- What should a small business incident response plan include?
- Should I use ISO 27001 or the NIST Cybersecurity Framework?
- What are the CIS Controls?
- Are GRC analysts in demand?
- What is the difference between an acceptable use policy and a fair use policy?
Sources
Related Guides
GuideSmall Business Security
How to Write an Incident Response Plan Small Business Owners Use
Learn how to write an incident response plan small business teams can execute quickly. Protect operations, contain threats, and recover critical systems.
Read more GuideGRC
NIST AI RMF: Implementation Guide for Small Teams
Learn how small teams can implement the NIST AI RMF to assess risk, govern deployments, and deploy artificial intelligence safely without enterprise overhead.
Read more GuideSmall Business Security
10 Small Business Cybersecurity Tips to Reduce Risk Fast
Protect your company with ten practical small business cybersecurity tips. Implement MFA, patch software, secure Wi-Fi, and build backups that work.
Read more GuideGRC
How to Conduct a Cybersecurity Risk Assessment in 7 Steps
A step-by-step method for information security risk assessment aligned with ISO 27005 and NIST SP 800-30: assets, threats, likelihood and impact scoring, risk appetite, treatment and the risk register.
Read more