NIST Cybersecurity Framework 2.0

Publisher

NIST

Type

Security framework

What it is

A framework of cybersecurity outcomes organized into six functions: Govern, Identify, Protect, Detect, Respond and Recover. Govern was added in version 2.0 (February 2024).

Key points

Six functions: Govern, Identify, Protect, Detect, Respond, Recover
Profiles describe current and target states
Tiers describe rigor of risk management

On the exam

Program structure and governance; the six functions.