NIST seeks input on guide to create community cybersecurity framework profiles

The National Institute of Standards and Technology has released a draft guide to help communities develop their own profiles based on the final “CSF 2.0” publication, the agency’s update to the cybersecurity framework.

“The NIST Cybersecurity Framework (CSF) 2.0 introduced the term ‘Community Profiles’ to reflect the use of the CSF for developing use case-specific cybersecurity risk management guidance for multiple organizations. This guide provides considerations for creating and using Community Profiles to help implement the Framework,” the draft...