Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Cybersecurity Framework 2.0 Manufacturing Profile: NIST IR 8183r2 Initial Public Draft
The initial public draft of NIST IR 8183r2 (Revision 2), "Cybersecurity Framework 2.0 Manufacturing Profile," is available for public comment through November 17, 2025.
NIST has released the initial public draft of NIST IR 8183 Revision 2, Cybersecurity Framework 2.0 Manufacturing Profile.
The Manufacturing Profile is aligned with manufacturing sector goals and industry best practices and can be used as a roadmap for reducing cybersecurity risk for manufacturers. The Manufacturing Profile provides a voluntary, risk-based approach for managing cybersecurity activities and reducing cyber risk to manufacturing systems and is meant to enhance but not replace current cybersecurity standards and industry guidelines.
This revision of the CSF Manufacturing Profile provides the following updates:
- Realigned guidance to CSF 2.0 Functions, including guidance for the new Govern Function
- Realigned guidance to CSF 2.0 Categories (changed from 23 in CSF 1.1 to 22 in CSF 2.0)
- Realigned guidance to CSF 2.0 Subcategories (changed from 108 in CSF 1.1 to 106 in CSF 2.0)
- Added guidance for CSF 2.0 supply chain risk management, platform security, and technology infrastructure resilience Categories
We invite you to review this document and provide comments by November 17, 2025.