• One year since NIST released Cybersecurity Framework 2.0, boosting enterprise security readiness. • New 2025 resources offer tailored pathways for diverse audiences to implement CSF 2.0. • Updated NIST IR 8286 series links cybersecurity governance with Enterprise Risk Management. • Public comment period open for IR 8286, IR 8286A, and IR 8286B until April 14, 2025. • NIST thanks stakeholders for feedback, implementation, and promotion, driving continuous improvement.

Article Summaries:

  • NIST marks one year since the launch of its Cybersecurity Framework (CSF) 2.0, announcing a suite of new resources to help organizations strengthen their security posture. The blog highlights a retrospective of missed tools, thanks stakeholders for feedback, and invites continued participation. Key 2025 updates include enhanced governance guidance linking cybersecurity to enterprise risk management (ERM) through the NIST IR 8286 series, with three documents open for public comment by April 14, 2025. Additional releases cover ransomware risk management (IR 8374 Revision 1, comments due March 14, 2025) and mapping tools to streamline use of multiple frameworks. NIST also notes expanded CSF 2.0 translations to support U.S. allies worldwide.

Sources: