Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Cybersecurity Framework
Helping organizations to better understand and improve their management of cybersecurity risk
Seeking comments until October 15, 2026, at 11:59 PM: Special Publication (SP) 1353 ipd (Initial Public Draft), Quick-Start Guide for Using Artificial Intelligence (AI) for Cybersecurity Framework (CSF) Analysis and Reporting.
CSF 2.0 Profiles
Templates and useful resources for creating and using both CSF profiles
Videos
Latest Updates
- Available for public comment: CSF 2.0 Quick-Start Guide for Using Artificial Intelligence (AI) for CSF Analysis and Reporting. This draft quick-start guide illustrates practical and actionable ways AI could be used for analyzing, planning, implementing, and monitoring an organization’s progress toward achieving CSF 2.0 outcomes. The comment period closes October 15.
- The NIST National Cybersecurity Center of Excellence (NCCoE) has published the final version of NIST Interagency Report 8576, Transit Cybersecurity Framework Community Profile to help U.S. transit agencies strengthen their cybersecurity practices while supporting safe and resilient transit services.
- The NIST National Cybersecurity Center of Excellence (NCCoE) has published the final version of NIST Interagency Report (IR) 8374 Revision 1, Ransomware Risk Management: A Cybersecurity Framework (CSF) 2.0 Community Profile. This resource translates the NIST CSF 2.0 into practical actions organizations and individuals can take to proactively manage and mitigate the risk of ransomware events.
- The final version of NIST Cybersecurity Framework 2.0: Cybersecurity, Enterprise Risk Management, and Workforce Management Quick-Start Guide (SP 1308) is now available.
- February 24, 2026: Celebrating Two Years of CSF 2.0! View the anniversary blog.
Contacts
For further information and/or questions about the Cybersecurity Framework
-
CONTACT: