NIST Cybersecurity Framework 2.0 Highlights Supply Chain Security

Since its release in 2014, the NIST Cybersecurity Framework (CSF) has been adopted by organizations worldwide and across industries. But a lot has changed in that period. NIST gathered input about how the CSF should evolve, and this month released the draft version of CSF 2.0. 

One of the most significant changes in CSF 2.0 is the inclusion of a Govern function and an emphasis on cybersecurity supply chain risk management (C-SCRM) and secure software development.

Addressing Increasing Supply …

csf csf 2.0 cybersecurity framework industries input nist nist cybersecurity framework organizations period release security supply supply chain supply chain security version