NIST CSF 2.0: Better risk management for the new era of supply chain security

As traditional cybersecurity focus areas have shifted to a broader set of risks, including software — and the software supply chain — one of the most enduring cybersecurity frameworks has received a facelift to match. The National Institute of Standards and Technology (NIST) has finalized and released to the public NIST Cybersecurity Framework (CSF) 2.0, the first major overhaul of the tool since it was rolled out in 2014.

appsec & supply chain security csf csf 2.0 cybersecurity cybersecurity frameworks focus frameworks management national nist nist csf nist csf 2.0 risk risk management risks security security operations software software supply chain standards supply supply chain supply chain security technology traditional cybersecurity