The New and Improved NIST CSF 2.0
summary
NIST CSF 2.0 concretely changes structure not just wording: it adds six functions (govern as a foundation), keeps 22 categories, adjusts subcategories to 107, and trims the core document to ~27 pages by moving detailed implementation examples online and relocating informative references off the PDF. Profiles gain a formal community profile concept for industry-specific baselines. Tiers remain but are advisory. Many supplemental guides are IPD or pending and NIST needs far more informative references and crosswalks before organizations can fully adopt 2.0.
AI-written summary · about
chapters (14)
- 0:00Introduction to NIST CSF 2.0
- 1:28History and background of CSF
- 4:58Understanding controls in cybersecurity
- 9:26Overview of CSF framework components
- 14:44Changes in CSF 2.0 functions
- 21:27Supply chain risk management in CSF
- 26:09Differences between CSF 1.1 and 2.0
- 31:04CSF profiles and implementation
- 33:32Understanding CSF implementation tiers
- 36:43Privacy and CSF overlap
- 38:08Next steps and future updates
- 41:21Resources and training for CSF
- 43:10Certification and adoption of CSF
- 45:41Q&A and feedback session
related talks
49mNIST Cybersecurity Framework v2.0: What’s changing?
35mRevolutionizing Cyber Defense: The NIST CSF 2.0 Advantage
50mIt’s a Journey…Where is NIST Headed with the Cybersecurity Framework
43mCSF Over Time: Shifting from Identify/Protect As You Grow
29mMeasuring Cybersecurity Maturity with the NIST CSF
40mCompliance Made Easy—Simplify Your Approach to Privacy
40mSometimes Sequels Are Good: CISA’s Update To the 2021 NTIA SBOM Minimum Elemen...
46mThe Perfect Storm, What NIS2 and CRA Mean for Your IT Security Strategy