Definition

NIST Cybersecurity Framework

The NIST Cybersecurity Framework is a voluntary set of guidelines that helps organizations understand, manage, and reduce their cybersecurity risk in plain, business-friendly terms. It organizes security work around a handful of core functions, from governing and identifying risk through protecting, detecting, responding, and recovering. Rather than prescribing specific tools, it gives leaders a common structure to assess where they stand and where to invest next. The 2024 update added an explicit govern function, sharpening the focus on leadership and oversight. Because it is flexible and widely recognized, companies of every size use it as a backbone, then map tighter standards onto it.