Access Alert: NIST publishes Cybersecurity Framework 2.0

Access Alert: NIST publishes Cybersecurity Framework 2.0

The US National Institute of Standards and Technology (NIST) published the final version of its Cybersecurity Framework 2.0 (CSF 2.0) on 26 February 2024. The CSF 2.0 is the culmination of a yearslong undertaking that included multiple public consultations and workshops with key public stakeholders to update the agency’s original cybersecurity framework, which was first published in 2014.

In addition to reflecting changes in the cybersecurity landscape that have taken place over the last decade, the CSF 2.0 features an expanded scope beyond critical infrastructure and complements the US National Cybersecurity Strategy released in March 2023. Whereas the original CSF was built around five key functions for entities to achieve a high level of cyber resilience (identify, protect, detect, respond, and recover), the CSF 2.0 adds a sixth “govern” function. The new function emphasises the importance of developing and maintaining a clear risk management strategy with well-defined roles, responsibilities, policies, procedures, and oversight, along with highlighting the potential legal, financial, and reputational consequences of not having one in place.

The CSF 2.0 provides foundational guidance for audiences and organisations of all sizes. It also offers technological sophistication to help manage and reduce their exposure to cybersecurity risks. To accomplish this level of accessibility, the CSF 2.0 includes case studies for others to emulate along with quick-start guides for a variety of organisation types.

Organisations can also use the CSF 2.0’s searchable catalogue of informative references to map their existing practices onto the CSF itself. Lastly, the CSF 2.0 is included among other NIST guidance documents organisations can refer to and contextualise through the Cybersecurity and Privacy Reference Tool (CPRT), which can be used to communicate best practices to different teams at varying levels of technical specificity.

If you’re seeking clarity on how the NIST Cybersecurity Framework 2.0’s latest updates and expanded scope might impact your organisation’s cybersecurity policies and practices, please contact Jacob Hafey at [email protected].

Related Articles

The need for more accurate geographical coordinates for earth stations in SpaceCap

The need for more accurate geographical coordinates for earth stations in SpaceCap

The International Telecommunication Union (ITU) Radiocommunication Sector (ITU-R)  plays an important role in the global management of the radio-frequency spectrum...

3 Oct 2024 Opinion
Advancing Malaysia’s Digital Potential through AI with Google

Advancing Malaysia’s Digital Potential through AI with Google

Malaysia’s ambition to become a high-income, digital-first nation is clear in the MADANI Economy framework. Recent discussions on investor-friendly policies...

1 Oct 2024 General
Google and Korea: 20 years of partnership and AI innovation

Google and Korea: 20 years of partnership and AI innovation

Korean entertainment groups like Blackpink and BTS have continually taken the world by storm, while Android revolutionized mobile access for...

26 Sep 2024 General
Access Alert: A new era of global governance – the Pact for the Future

Access Alert: A new era of global governance – the Pact for the Future

On 22 September, the United Nations adopted the Pact for the Future at the Summit of the Future in New...

24 Sep 2024 Opinion