Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cybersecurity Framework

Helping organizations to better understand and improve their management of cybersecurity risk

CSF 2.0

For industry, government, and organizations to reduce cybersecurity risks

Read the Document

Quick Start Guides

For users with specific common goals

View the Quick Start Guides

CSF 2.0 Profiles

Templates and useful resources for creating and using both CSF profiles

See the Profiles

Informative References (Mappings)

See how NIST's resources overlap and share themes

See the Mappings

Videos

The NIST CSF 2.0

Overview of the NIST CSF 2.0 Small Business Quick Start Guide

Latest Updates

On December 5, 2024, the NIST Cybersecurity Framework 2.0 Quick-Start Guide for Creating and Using Organizational Profiles is now available in French, Portuguese and Spanish. All translations can be found on the Translations of NIST Cybersecurity and Privacy Resources page.
On November 25, 2024, the NIST Cybersecurity Framework 2.0 Resource & Overview Guide is now available in French, Portuguese and Spanish. All translations can be found on the Translations of NIST Cybersecurity and Privacy Resources page.
On November 21, 2024, The CSF 2.0 is now available in French and German. All translations can be found on the Translations of NIST Cybersecurity and Privacy Resources page (more are expected in the near future).
On November 13, 2024, The CSF 2.0 is now available in Polish. All translations can be found on the Translations of NIST Cybersecurity and Privacy Resources page.
On October 21, 2024, NIST published the final version of the CSF 2.0 Quick Start Guide for Cybersecurity Supply Chain Risk Management (C-SCRM)
We’re celebrating Cybersecurity Awareness Month by sharing even more CSF 2.0 resources. Learn more!
NEW Supplemental Spreadsheet: Cybersecurity Framework 1.1 to 2.0 Core Transition Changes Overview.
The final version of the OLIR Mapping from the 800-53rev 5.1.1 to the CSF 2.0 was posted: National Online Informative References Program | CSRC (nist.gov)
The CSF 2.0 is now available in Spanish and Portuguese. All translations can be found on the NIST International Cybersecurity and Privacy Resources page (more are expected in the near future).
NIST was awarded the ‘Ecosystem Champion’ Cyber Policy Award for CSF 2.0 efforts on April 24, 2024.
A CSF 2.0 Community Profiles NCCoE Webinar took place on April 23, 2024 and focused on opportunities to help organizations develop community profiles based on the CSF 2.0.
On March 20, 2024, NIST hosted a webinar titled “Overview of the NIST Cybersecurity Framework 2.0 Small Business Quick Start Guide.” The video recording and slides are available here.
Aspen Institute hosted a discussion on CSF 2.0, including the Under Secretary for Standards and Technology and NIST Director Laurie Locascio. The video recording is available as a resource.
NIST Cybersecurity Framework 2.0 has been published! See the News Release.

See more Latest Updates

Contacts

For further information and/or questions about the Cybersecurity Framework

CONTACT:

cyberframework@nist.gov