It's been 10 years since NIST Cybersecurity Framework (CSF)
was updated.
This is a long time if you think about how much the world of
cybersecurity and the sophistication of its criminals has changed
in that period.
Following a lengthy consultation process by the U.S. Government
and the National Institute for Standards and Technology (NIST), a
new framework has been published and it represents a significant
leap forward in how organisations view and manage cyber
risk.
The NIST CSF has become the world's most popular. Its five
headline words that describe the functions it recommends –
identify, protect, detect, respond, and recover – have become
taglines in the world of cyber risk management. Now, the latest
version of the NIST CSF adds a sixth function – govern, which
address a critical gap that existed in the earlier version: that
organisations need responsible, accountable, consulted and informed
decisions and decision makers to manage an organisation's
