Glossary

NIST CSF

The NIST Cybersecurity Framework is a flexible way to organize cybersecurity outcomes, risk discussions, improvement priorities, and evidence.

By Aneo B.V.Published August 31, 2026Editorial standards
NIST CSFCybersecurity frameworkFramework readiness

The NIST Cybersecurity Framework, or NIST CSF, helps organizations understand, assess, prioritize, and communicate cybersecurity outcomes.

NIST CSF 2.0 organizes outcomes across six Functions:

  • Govern
  • Identify
  • Protect
  • Detect
  • Respond
  • Recover

The framework is flexible and does not provide a formal certification by itself. Teams can use profiles, current and target states, metrics, owners, policies, and evidence to plan improvement. The right implementation depends on business context, risk tolerance, systems, and customer or regulatory expectations.

See when NIST CSF is the better first step for a growing business.