On August 8, 2023, the National Institute of Standards and Technology (NIST) released a public draft of their Cybersecurity Framework (CSF) 2.0. The draft of CSF 2.0 can be accessed here: NIST Releases Cybersecurity Framework 2.0 Draft & Implementation Examples | NIST
For a comprehensive overview of changes from CSF 1.1 to this draft, check the “Note to Reviewers” section on the first three pages of CSF 2.0.
Since the inaugural launch of the Framework in 2014, the Framework has been seen as a vital instrument in mitigating cybersecurity risks. While CSF 1.1, the prior version, remains competent in managing risks, according to NIST’s notice of this release, the evolving landscape of cybersecurity threats demands a timely revision to address present and upcoming challenges.
NIST is actively soliciting feedback on this draft of the Framework, emphasizing a few key areas:
Relevance to Current Challenges:
NIST wants to ensure CSF 2.0 effectively responds to today’s cyber threats while retaining the integrity of its original objectives.
Alignment with Best Practices:
Does the updated Framework resonate with top-tier practices and resources?
Transition from CSF 1.1 to 2.0:
Recommendations are sought on smoothing the shift between versions.
CSF Core:
The CSF 2.0 draft contains a revised CSF Core from previous discussions. Crucially, this version excludes Implementation Examples or Informative References due to the need for frequent updates. Separate drafts for these have been made available.
Feedback on Implementation Examples:
NIST is keen to understand which examples are most valuable to users and if existing guidance, such as the NICE Framework Tasks, can serve as practical examples.
The finalized CSF 2.0 will be located on the NIST Cybersecurity Framework website and will harness the capabilities of the NIST Cybersecurity and Privacy Reference Tool (CPRT).
To be heard on the draft of CSF 2.0, send comments to cyberframework@nist.gov before November 4, 2023. Remember that all feedback will be made public, so comments should be appropriate and free from personal or sensitive information.
Registration has yet to open for a hybrid online and in-person CSF workshop planned by NIST on September 19-20, 2023. NIST anticipates the final CSF 2.0 release in early 2024.
To Try Out Our Solution for Free: Click Here
To Get in Contact with Us: Click Here or Reach us by:
Phone: (603) 484-5007
Email: sales@regdox.com
See the enclave in action.
The Compliant Computing Enclave keeps CUI inside one boundary, with your endpoints out of scope and the evidence trail already built.
Talk to an Expert →