NIST Releases Quick-Start Guide Linking Cybersecurity, Enterprise Risk, and Workforce Management

NIST SP 1308 (Mar 2026) is a quick-start guide to align cybersecurity, enterprise risk, and workforce management by integrating the Cybersecurity Framework (CSF) 2.0, the NICE Framework, and the NIST IR 8286 series. It describes a five-step lifecycle—scope, collect risk intelligence, build current/target profiles, perform gap analysis, and implement action plans—and recommends workforce interventions such as upskilling, role restructuring, targeted recruitment, and external augmentation, with continuous monitoring to reduce cyber risk tied to workforce gaps.