NIST CSF 2.0 · pillar 1 of 5
What the Framework is
Outcomes, not controls — and since 2.0, not just for critical infrastructure.
- 1 It describes outcomes, not controls The CSF describes cybersecurity outcomes to be achieved, not the controls or activities that achieve them. It…
- 2 It dropped critical infrastructure from the title Version 1.1 was the Framework for Improving Critical Infrastructure Cybersecurity. Version 2.0, published 26 February…
- 3 Three components, and only one is a deliverable The CSF has three components: the Core (the taxonomy of outcomes), Organizational Profiles (where you are and where you…
Start this pillar See the whole map
Read against The NIST Cybersecurity Framework (CSF) 2.0, NIST CSWP 29 (26 February 2024) on . Regulations and frameworks change; the date is there so you can tell whether this has kept up.