NIST CSF 2-0 detail

NIST CSF 2.0 adds Govern function February 2024.

Definition

CSF 2.0 6 functions: Govern (GV: strategy, roles, policy, oversight, supply chain risk), Identify (ID), Protect (PR), Detect (DE), Respond (RS), Recover (RC). 106 categories + subcategories. Profiles and Tiers maintained. Quick Start Guides for SMBs, supply chain, enterprise risk management. Compatible with NIST SP 800-53, ISO 27001, COBIT 2019.

Origin

NIST (National Institute of Standards and Technology), CSF 1.0 February 2014, 1.1 April 2018, 2.0 February 2024.

Usage

Voluntary adoption but US de facto standard, required for DoD CMMC, strongly recommended by OMB for federal agencies.

Related terms

• NIST CSF — fiche socle.
• NIST SP 800-53 — contrôles détaillés.
• CMMC — utilisé en sous-bassement.