NIST Cybersecurity Framework 2.0
IMRAN RASHEED
Cyber Security Consultant | Auditor | Risk Assessment | SOC | VAPT| C-CISO | CISSP |
The CSF 2.0, which supports the implementation of the National Cybersecurity Strategy, has an expanded scope that goes beyond protecting critical infrastructure, such as hospitals and power plants, to all organisations in any sector.
The CSF's governance component emphasises that cybersecurity is a significant source of enterprise risk that senior leaders should consider alongside finance and reputation.
The framework's core is now organised around six essential functions: Identify, Protect, Detect, Respond and Recover, and CSF 2.0's newly added Govern function.
When considered together, these functions provide a comprehensive view of the life cycle for managing cybersecurity risk.
The updated framework anticipates organisations coming to the CSF with varying needs and degrees of experience implementing cybersecurity tools.
NIST is precisely the sort of respected organisation to do this correctly.