NIST updates Cybersecurity Framework after a decade of lessons

NIST released CSF 2.0, expanding the framework beyond critical infrastructure to all organizations and introducing a sixth core function, 'govern', to integrate cybersecurity into enterprise risk management. The update adds resources such as quick-start guides, implementation examples, a mapping catalog, and reference tools, aligns with the U.S. National Cybersecurity Strategy, and is positioned as a living, globally applicable suite that invites community feedback and contributions.