Author(s)
Cherilyn Pascoe, Stephen Quinn, Karen Scarfone
Abstract
The NIST Cybersecurity Framework (CSF) 2.0 provides guidance to industry, government agencies, and other organizations to manage cybersecurity risks. It offers a taxonomy of high-level cybersecurity outcomes that can be used by any organization — regardless of its size, sector, or maturity — to better understand, assess, prioritize, and communicate its cybersecurity efforts. The CSF does not prescribe how outcomes should be achieved. Rather, it links to online resources that provide additional guidance on practices and controls that could be used to achieve those outcomes. This document describes CSF 2.0, its components, and some of the many ways that it can be used.
Citation
NIST Cybersecurity White Papers (CSWP) - 29 tha
Keywords
cybersecurity, Cybersecurity Framework (CSF), cybersecurity risk governance, cybersecurity risk management, enterprise risk management, Profiles, Tiers.
Citation
Pascoe, C.
, Quinn, S.
and Scarfone, K.
(2025),
The NIST Cybersecurity Framework (CSF) 2.0 (Thai translation), NIST Cybersecurity White Papers (CSWP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.CSWP.29.tha, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=959659 (Accessed April 25, 2026)
Additional citation formats
Issues
If you have any questions about this publication or are having problems accessing it, please contact [email protected].