NIST Cybersecurity Framework 2.0 Concept Paper: Potential Significant Updates to the Cybersecurity Framework

The NIST Cybersecurity Framework (CSF or Framework) provides guidance to organizations to better understand, manage, reduce, and communicate cybersecurity risks. It is a foundational and essential resource used by all sectors around the world.

The CSF is being updated in an open manner with input from government, academia, and industry, including through workshops, public review and comment, and other forms of engagement. The “CSF 2.0” version reflects the evolving cybersecurity landscape— but community needs will drive the extent and content of the changes.