The NIST Cybersecurity Framework (CSF) 2.0 organizes cybersecurity into six functions: GOVERN, IDENTIFY, PROTECT, DETECT, RESPOND, and RECOVER. Taken together, these functions provide a view of the cyber risk management lifecycle.
The framework is designed for organizations of any size, sector, or maturity level. Its core combines cybersecurity activities, desired outcomes, and applicable references to help prioritize and communicate security efforts.
Within PROTECT, the framework includes safeguards such as identity management, authentication and access control, awareness and training, data security, and resilience of technology infrastructure. DETECT focuses on discovering and analyzing anomalies, indicators of compromise, and other potentially adverse events.
ENISA says technical measures must work in harmony with people, and that human factors are part of an organization's security posture. It also recommends using multiple measures to triangulate findings and avoid relying only on self-reports or simple metrics.
