!!! Overview [{$pagename}] ([NIST CSF]) provides a [policy] framework of computer [security] guidance for how private sector organizations can assess and improve their ability to prevent, detect, and respond to [cybersecurity] [attacks]. [{$pagename}] "provides a high level taxonomy of [cybersecurity] outcomes and a methodology to assess and manage those outcomes." Version 1.0 was published by the US [National Institute of Standards and Technology] in [2014|Year 2014], originally aimed at operators of critical infrastructure. [{$pagename}] being used by a wide range of businesses and organizations, and helps shift organizations to be proactive about risk management. A [security] framework [adoption] study reported that 70% of the surveyed organizations see [NIST]'s framework as a popular best practice for computer security, but many note that it requires significant investment. [{$pagename}] includes guidance on relevant protections for privacy and civil liberties. [{$pagename}] [Version] 1.1 was announced and made publicly available on April 16, [2018|Year 2018] [2] !! More Information There might be more information for this subject on one of the following: [{ReferringPagesPlugin before='*' after='\n' }] ---- * [#1] - [NIST_Cybersecurity_Framework|Wikipedia:NIST_Cybersecurity_Framework|target='_blank'] - based on information obtained 2017-06-12 * [#2] - [Framework for Improving Critical Infrastructure Cybersecurity|https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf|target='_blank'] - based on information obtained 2018-08-22-