NIST Updates Cybersecurity Framework

By

CSF 2.0 is expected in early 2024.

Major updates to NIST’s Cybersecurity Framework (CSF) are underway, with the new CSF 2.0 expected in 2024.

“Based on stakeholder feedback, in order to reflect the ever-evolving cybersecurity landscape and to help organizations more easily and effectively manage cybersecurity risk, NIST is planning a new, more significant update to the framework: CSF 2.0,” NIST says. The framework was initially produced in 2014 and updated to CSF 1.1 in 2018.

NIST plans to seek stakeholder feedback throughout the process, and a discussion draft is now available for review. “The modifications from CSF 1.1 are intended to increase clarity, ensure a consistent level of abstraction, address changes in technologies and risks, and improve alignment with national and international cybersecurity standards and practices,” according to the draft document.

Check out NIST’s Journey to CSF 2.0 website for the proposed timeline and other information.
 
 

 
 

05/05/2023

Related content

comments powered by Disqus