Critique Popular Risk Assessment and Management Procedures
An official website of the United States government
Here’s how you know
Here’s how you knowOfficial websites use .gov A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS A lock (
A locked padlock ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.https://www.nist.gov/cyberframework
-
Topics
- All Topics
- Advanced communications
- Artificial intelligence
- Bioscience
- Buildings and construction
- Chemistry
- Climate
- Cybersecurity
- Electronics
- Energy
- Publications
- Labs & Major Programs
- Services & Resources
- News & Events
- About NIST
Cybersecurity Framework
Helping organizations to better understand and improve their management of cybersecurity risk
- Framework Expand or Collapse
- Getting Started Expand or Collapse
- Perspectives Expand or Collapse
- Success Stories Expand or Collapse
- Online Learning Expand or Collapse
- Evolution Expand or Collapse
- Frequently Asked Questions Expand or Collapse
- Events and Presentations Expand or Collapse
- Related Efforts (Roadmap)
- Informative References Expand or Collapse
- Resources Expand or Collapse
- Newsroom Expand or Collapse
- Related Programs
Connect with us
TwitterFramework Version 1.1
The Cybersecurity Framework is ready to download.
New to Framework
This voluntary Framework consists of standards, guidelines and best practices to manage cybersecurity risk.
Online Learning
Intro material for new Framework users to implementation guidance for more advanced Framework users.
Latest Updates
- See our latest Success Story featuring how the Lower Colorado River Authority (LCRA) [nist.gov] implemented a risk-based approach to the CSF and tailored it to meet their unique needs.
- NIST has released a Cybersecurity White Paper, Benefits of an Updated Mapping Between the NIST Cybersecurity Framework and the NERC Critical Infrastructure Protection Standards, which describes a recent mapping initiative between the NERC CIP standards and the NIST Cybersecurity Framework. In addition, a mapping is available to show which Cybersecurity Framework Subcategories can help organizations achieve a more mature CIP requirement compliance program.
- NIST has released a draft ransomware risk management profile, The Cybersecurity Framework Profile for Ransomware Risk Management, Draft NISTIR 8374, which is now open for comment through October 8, 2021.
- Draft NISTIR 8286B, Prioritizing Cybersecurity Risk for Enterprise Risk Management, is now available for public comment! This report continues an in-depth discussion of the concepts introduced in NISTIR 8286, Integrating Cybersecurity and Enterprise Risk Management, with a focus on the use of enterprise objectives to prioritize, optimize, and respond to cybersecurity risks.
- NIST just released Security Measures for “EO-Critical Software” Use Under Executive Order (EO) 14028 to outline security measures intended to better protect the use of deployed EO-critical software in agencies’ operational environments.
- To highlight our ongoing international engagement, we’ve collected a series of videos that show how our partners across the world are looking at various cybersecurity and privacy issues that we at NIST are also tracking. Check these videos out HERE!
To see more Latest Updates click here
Contacts
For further information and/or questions about the Cybersecurity Framework
- CONTACT: cyberframework@nist.gov
HEADQUARTERS
100 Bureau Drive Gaithersburg, MD 20899 301-975-2000Webmaster | Contact Us | Our Other Offices
Twitter Facebook LinkedIn Instagram YouTube RSS Feed Mailing List How are we doing? Feedback