Skip to content

Framework

NIST CSF

NIST Cybersecurity Framework

What it is
A voluntary framework for managing cybersecurity risk, widely used as a common language for security programmes.
Applies to
Any organisation (voluntary); referenced by many US federal and state requirements
Current version
NIST Cybersecurity Framework 2.0 (February 2024)
Set by
US National Institute of Standards and Technology

Official text: NIST Cybersecurity Framework