Why is NIST adding Governance to the NIST CSF 2.0?

**Executive summary:** The article explains NIST's proposed addition of the 'Govern' function to the Cybersecurity Framework (CSF) 2.0, outlining categories such as organizational context, risk management strategy, cybersecurity supply chain risk management, roles and responsibilities, policies/processes, and oversight; it emphasizes that Govern is cross-cutting and will influence CSF scoring and implementation guidance.