NIST updates Cybersecurity Framework

The U.S. National Institute of Standards and Technology finalized an update of its Cybersecurity Framework, which was last updated in 2014. The CSF 2.0 supports implementation of the U.S. National Cybersecurity Strategy with a broadened scope beyond protecting critical infrastructure and includes resources and best practices applicable to organizations across all economic sectors. NIST indicated the updates also "added emphasis on governance."