NIST releases Cybersecurity Framework 2.0 draft
The US National Institute of Standards and Technology (NIST) is seeking comments on the draft of CSF 2.0, an updated version of the Framework for Improving Critical Infrastructure Cybersecurity. The new version aims to appeal to a broader range of organizations and prioritize corporate governance and supply chain security. NIST has added a new function called "Govern" to address decision-making around cybersecurity, and the draft emphasizes the importance of supply chain risk management. NIST wants to expand the use of the CSF beyond critical infrastructure and make it a useful tool for all sectors.
Source: Link
Frequently Asked Questions - NIST releases Cybersecurity Framework 2.0 draft
1. What is the NIST Cybersecurity Framework?
The NIST Cybersecurity Framework is a set of guidelines, best practices, and standards developed by the National Institute of Standards and Technology (NIST) to help organizations manage and improve their cybersecurity posture. It provides a common language and framework for organizations to assess and address their cybersecurity risks.
2. What is the purpose of releasing the NIST Cybersecurity Framework 2.0 draft?
The purpose of releasing the draft of the NIST Cybersecurity Framework 2.0 is to gather public feedback and input on the proposed updates and revisions to the framework. It is an opportunity for stakeholders and organizations to provide their thoughts and suggestions before the final version is released.
3. How can I provide feedback on the NIST Cybersecurity Framework 2.0 draft?
To provide feedback on the NIST Cybersecurity Framework 2.0 draft, you can email your questions or comments to the designated email address: cyberframework@nist.gov. Additionally, the NIST website may have specific instructions on how to submit feedback.
4. When was the draft of the NIST Cybersecurity Framework 2.0 released?
The draft of the NIST Cybersecurity Framework 2.0 was released on August 8, 2023, according to the search results.
Please note that these FAQ-style answers are extrapolated based on the available information from the search results, and the actual FAQs and their answers may vary.