NIST released the Cybersecurity Framework (CSF) 2.0 in 2024 to help organizations of all sizes and sectors manage and reduce their cybersecurity risks. The collection of tools and resources was the result of a multiyear engagement with stakeholders around the world. The goal was to update NIST’s 2014 framework to address emerging cybersecurity risks in all parts of the economy and society.
The CSF is useful regardless of the current security posture and technical sophistication of an organization’s cybersecurity program. Its flexible approach prompts users to consider their cybersecurity plan in the context of their mission — and then adapt the CSF, tailored to their needs. Through efforts such as this, NIST works to cultivate trust in information technology, helping to ensure the success of the systems our nation relies upon.