United States ·Guideline / framework / standard

The NIST Cybersecurity Framework (CSF) 2.0

In force · 26 February 2024

Summary

The framework provides a taxonomy of cybersecurity outcomes usable by organisations of any size and sector, not only critical infrastructure. Version 2.0 adds a 'Govern' function to the existing five (Identify, Protect, Detect, Respond, Recover) and expands supply-chain risk management. It comes with profiles, quick-start guides and implementation examples.

Original title

The NIST Cybersecurity Framework (CSF) 2.0

Title in other languages

• Framework di cybersicurezza del NIST (CSF) 2.0
• Cadre de cybersécurité du NIST (CSF) 2.0
• Marco de ciberseguridad del NIST (CSF) 2.0

Jurisdiction

United States

Issuing body

National Institute of Standards and Technology (NIST)

Official number

NIST CSWP 29

Type

Guideline / framework / standard

Date adopted

26 February 2024

Status

In force

Available languages

English, Spanish, French, Italian

Topics

• Governance and coordination
• Supply chain
• SMEs
• Critical infrastructure

Licence / terms of use

Public domain / official act – Pubblicazione del governo federale USA; NIST ha pubblicato anche traduzioni in altre lingue.

Collected from

manuale

Last verified

26 October 2026 (verified by Claude (seed iniziale, da revisionare in redazione))

National Institute of Standards and Technology (NIST). (2024). The NIST Cybersecurity Framework (CSF) 2.0 (NIST CSWP 29). https://www.nist.gov/cyberframework

National Institute of Standards and Technology (NIST). "The NIST Cybersecurity Framework (CSF) 2.0." 26 February 2024. https://www.nist.gov/cyberframework.

@misc{us_nist_csf_2_0,
  author       = {{National Institute of Standards and Technology (NIST)}},
  title        = {{The NIST Cybersecurity Framework (CSF) 2.0}},
  year         = {2024},
  note         = {NIST CSWP 29},
  url          = {https://www.nist.gov/cyberframework},
  urldate      = {2026-10-26}
}

Report an error in this record