NIST Cybersecurity Framework (CSF)

The NIST Cybersecurity Framework is a voluntary framework that helps organizations of any size or sector understand, reduce, and communicate cybersecurity risk in a common language. Version 2.0, released in February 2024, broadened the framework's scope beyond its original critical-infrastructure focus to apply to all organizations, and organizes its guidance around six functions: Govern, Identify, Protect, Detect, Respond, and Recover. Each function breaks down into more specific categories and outcomes, and the framework maps to other standards (including NIST SP 800-82 for OT-specific guidance) rather than replacing them.