"Strengthening Cybersecurity: NIST Expands Framework and White House Addresses Workforce Shortfall"

The US National Institute of Standards and Technology (NIST) has released a draft version of the updated Cybersecurity Framework (CSF) 2.0, expanding its scope to include all organizations regardless of size or type. The new version introduces a new pillar called "govern" to emphasize the importance of cybersecurity as a major enterprise risk and provide guidance on decision-making to support security strategy. The draft also offers improved implementation guidance through sector-specific profiles, aiming to assist smaller organizations in effectively utilizing the framework. NIST is accepting comments on the draft until November 4, 2023.