thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

NIST Cybersecurity Framework 2.0 (NIST CSF 2.0)

Voluntary NIST framework (Feb 2024) organizing cybersecurity outcomes into six functions: Govern, Identify, Protect, Detect, Respond, Recover.

Definition

CSF 2.0 expanded the framework's scope from critical infrastructure to all organizations and added the Govern function to the original five. It has three parts: the CSF Core (functions, categories, subcategories), Organizational Profiles (current and target), and Tiers. It is outcome-based and maps to other standards through informative references.

Example

A hospital builds a CSF 2.0 Current Profile, compares it to a Target Profile, and prioritizes the gaps.

Exam tip

CSF 2.0 has six functions and Govern is the new one; older questions may list only five.

Related terms