NIST 2.0

The National Institute of Standards and Technology (NIST) has updated the widely used Cybersecurity Framework (CSF). The new 2.0 edition is designed to help all organizations in any sector to achieve their cybersecurity goals with added emphasis on governance as well as supply chains. The updated framework anticipates that organizations will come to the framework with varying needs and degrees of experience implementing cybersecurity tools.

The 2.0 update is the organization's first major update on their widely used cyber security framework since its release. This update is the outcome of a multiyear process of discussions and public comments aimed at making the framework more effective and suitable for all audiences, industry sectors and organization types while as the original CSF focused directly on the critical sector. The framework’s core is now organized around six key functions: Identify, Protect, Detect, Respond and Recover, along with CSF 2.0’s newly added Govern function. When considered together, these functions provide a comprehensive view of the life cycle for managing cybersecurity risk.