← Standards
NIST Cybersecurity Framework 2.0NIST

Cybersecurity Framework 2.0

Version 2.0, published in 2024, adds a sixth function — Govern — to the historic five: Identify, Protect, Detect, Respond, Recover. It explicitly steps outside the federal perimeter to address any organisation, and strengthens supply chain coverage.

Official text

Who it applies to

  • CISOs
  • Risk functions
  • Organisations seeking a shared language with their board

Structuring points

  • The Recover (RC) function overlaps directly with ICT continuity
  • Current and target profiles structure the improvement path
  • Implementation tiers are not maturity levels

Any organisation, at any level of cyber maturity.