NIST Cybersecurity Framework v2.0
On this page
v2 Govern/Identify/Protect/Detect/Respond/Recover cyber framework.
Definition
CSF v2 adds the Govern function (Govern: Roles & Responsibilities, Risk Management Strategy, Cybersecurity Supply Chain Risk Management). 23 categories, 106 subcategories. Voluntarily adopted by 100+ countries. Coupled with Implementation Tiers (Partial → Adaptive) and Profiles (current/target/community).
Origin
CSF v1.0 published February 2014 ; v1.1 April 2018 ; v2.0 February 2024.
Example in context
A French SME adopts CSF v2 to structure its cyber strategy mapping it to its NIS2 obligations.
Related terms
- SP 800-53 — supporting controls.