Glossary: Governance, Risk and Compliance

NIST Cybersecurity Framework (CSF) 2.0

Also written: NIST CSF, CSF, NIST, Govern, Identify, Protect, Detect, Respond, Recover

A free framework published in 2024 by the US National Institute of Standards and Technology. It groups security work into six functions: Govern, Identify, Protect, Detect, Respond and Recover. Kettle & Crane self-assesses against it.