NIST CSF 2.0 · pillar 2 of 5
GOVERN, the Function that was added
The headline change in 2.0, and it is not a sixth step in a sequence.
- 4 Six Functions, not five The Core has six Functions: GOVERN, IDENTIFY, PROTECT, DETECT, RESPOND, RECOVER. GOVERN was added in 2.0 and covers how…
- 5 What GOVERN actually contains GOVERN holds the Categories you would expect a board to own: organizational context, risk management strategy, roles…
- 6 The Functions are not a lifecycle The six Functions are not steps, phases or a maturity progression. NIST states they should be addressed concurrently…
Start this pillar See the whole map
Read against The NIST Cybersecurity Framework (CSF) 2.0, NIST CSWP 29 (26 February 2024) on . Regulations and frameworks change; the date is there so you can tell whether this has kept up.