Glossary · N
NIST CSF 2.0
The NIST Cybersecurity Framework version 2.0, published in 2024, is a voluntary framework that organizes a cybersecurity program into six functions: Govern, Identify, Protect, Detect, Respond and Recover.
Extended definition
In more detail.
Version 2.0 added the Govern function and extended the framework’s scope beyond critical infrastructure to all organizations. It describes outcomes rather than prescribing controls, and organizations use it to build current and target profiles, communicate with boards and insurers, and map specific requirement sets such as NIST SP 800-171 into a coherent program. There is no certification against it.
In our work
Where it appears.
See NIST CSF 2.0 alignment for current and target profiles and the roadmap between them.
By David Selakovic · Published 2026-10-16 · Revised 2026-10-16 · Reviewed every 180 days