Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cybersecurity Framework

Helping organizations to better understand and improve their management of cybersecurity risk

CSF 2.0

For industry, government, and organizations to reduce cybersecurity risks

Read the Document

Quick Start Guides

For users with specific common goals

View the Quick Start Guides

CSF 2.0 Profiles

Templates and useful resources for creating and using both CSF profiles

See the Profiles

Informative References (Mappings)

See how NIST's resources overlap and share themes

See the Mappings

Videos

The NIST CSF 2.0

Overview of the NIST CSF 2.0 Small Business Quick Start Guide

Latest Updates

On December 16, 2024, The NIST National Cybersecurity Center of Excellence (NCCoE) has released Draft NIST Internal Report (IR) 8467, Genomic Data Cybersecurity and Privacy Frameworks Community Profile (Genomic Data Profile), which provides a structured, risk-based approach for managing both cybersecurity and privacy risks in processing genomic data. The updated draft incorporates the CSF 2.0 and NIST Privacy Framework (PF) version 1.0 to help organizations prioritize cybersecurity and privacy capabilities. This publication is the first joint CSF and PF Community Profile developed by NIST. Learn more here.
On December 10, 2024, The NIST National Cybersecurity Center of Excellence (NCCoE) hosted a webinar titled “NIST Cybersecurity Framework Community Profiles Workshop.” The event recording is available here.
On December 5, 2024, the NIST Cybersecurity Framework 2.0 Quick-Start Guide for Creating and Using Organizational Profiles is now available in French, Portuguese and Spanish. All translations can be found on the Translations of NIST Cybersecurity and Privacy Resources page.
On November 25, 2024, the NIST Cybersecurity Framework 2.0 Resource & Overview Guide is now available in French, Portuguese and Spanish. All translations can be found on the Translations of NIST Cybersecurity and Privacy Resources page.
On November 21, 2024, The CSF 2.0 is now available in French and German. All translations can be found on the Translations of NIST Cybersecurity and Privacy Resources page (more are expected in the near future).
On November 13, 2024, The CSF 2.0 is now available in Polish. All translations can be found on the Translations of NIST Cybersecurity and Privacy Resources page.
On October 21, 2024, NIST published the final version of the CSF 2.0 Quick Start Guide for Cybersecurity Supply Chain Risk Management (C-SCRM)
We’re celebrating Cybersecurity Awareness Month by sharing even more CSF 2.0 resources. Learn more!
NEW Supplemental Spreadsheet: Cybersecurity Framework 1.1 to 2.0 Core Transition Changes Overview.
The CSF 2.0 is now available in Spanish and Portuguese. All translations can be found on the NIST International Cybersecurity and Privacy Resources page (more are expected in the near future).
NIST was awarded the ‘Ecosystem Champion’ Cyber Policy Award for CSF 2.0 efforts on April 24, 2024.
A CSF 2.0 Community Profiles NCCoE Webinar took place on April 23, 2024 and focused on opportunities to help organizations develop community profiles based on the CSF 2.0.
Aspen Institute hosted a discussion on CSF 2.0, including the Under Secretary for Standards and Technology and NIST Director Laurie Locascio. The video recording is available as a resource.
NIST Cybersecurity Framework 2.0 has been published! See the News Release.

See more Latest Updates

Contacts

For further information and/or questions about the Cybersecurity Framework

CONTACT:

cyberframework@nist.gov