NIST updates Cybersecurity Framework with Version 2.0

The National Institute of Standards and Technology (NIST) has unveiled a significant update to its Cybersecurity Framework (CSF) after a decade of helping organizations manage and mitigate cyber threats. CSF 2.0 is designed for broader use, targeting all industry sectors and organization types. It emphasizes governance, recognizing cybersecurity as a significant enterprise risk. The update includes new resources, such as quick-start guides and reference tools, to aid implementation and alignment with the National Cybersecurity Strategy. NIST aims to facilitate communication between technical experts and senior leadership, offering guidance tailored to different users and use cases. The framework, which now includes a seventh function, "Govern," provides a comprehensive approach to managing cybersecurity risk. Healthcare organizations have increasingly adopted CSF, with many citing it as their primary cybersecurity framework. NIST emphasizes the importance of user feedback and collaboration in refining and customizing the framework to meet evolving cybersecurity needs.