Data Security: A Critical Component of NIST Cybersecurity Framework 2.0

The National Institute of Standards and Technology (NIST) has updated the widely used Cybersecurity Framework (CSF), its landmark guidance document for reducing cybersecurity risk. The new 2.0 edition is designed for all audiences, industry sectors and organization types, from the smallest schools and nonprofits to the largest agencies and corporations — regardless of their degree of cybersecurity sophistication.

In response to the numerous comments received on the draft version, NIST has expanded the CSF’s core guidance and developed related resources to help users get the most out of the framework. These resources are designed to provide different audiences with tailored pathways into the CSF and make the framework easier to put into action.

Your NIST CSF 2.0 strategy you must include a data security strategy that delivers sensitive data discovery, data classification, and data analysis. This paper discusses the role data security plays in aligning to the NIST CSF 2.0 framework.