NIST is the U.S. National Institute of Standards and Technology, globally recognized for its Cybersecurity Framework (CSF) and security standards.
NIST (National Institute of Standards and Technology) develops frameworks and special publications (SP) that have become global cybersecurity references. NIST CSF 2.0 organizes cyber risk management into 6 functions: Govern, Identify, Protect, Detect, Respond and Recover. Publications SP 800-53 (controls) and SP 800-30 (risk assessment) complement the framework.
No. NIST CSF is a voluntary reference framework, not a certifiable standard. Organizations use it to assess and improve their cybersecurity posture. For certification, ISO 27001 or SOC 2 is used.
Version 2.0 added Govern as a sixth core function, expanded scope beyond critical infrastructure to all organizations, and improved integration with enterprise risk management.
Need an assessment in this area?