NIST CSF 2.0: How the framework is evolving for modern cyber risk

NIST CSF 2.0 (with a 2025 draft Cyber AI Profile) expands the 2014 framework into a sector-agnostic cybersecurity standard by promoting a new Govern function, emphasizing supply-chain controls and AI-specific risks (model manipulation, data poisoning), and aligning with global standards and Zero Trust principles; the article highlights implementation guidance, business ROI examples, and regulatory crosswalks but contains no incident data or technical indicators.