NIST Cybersecurity Framework 2.0 Informative References Quick-Start Guide

NIST Cybersecurity Framework Updates

Published March 23rd, 2026

Detected March 24th, 2026

Summary

NIST has released an initial public draft of the SP 1347, 'NIST Cybersecurity Framework 2.0: Informative References Quick-Start Guide.' This document explains informative references and their role in achieving CSF 2.0 outcomes, introducing NIST tools for managing them and exploring AI's support for reference data.

View original document View source feed page

What changed

NIST has issued an initial public draft of SP 1347, the 'NIST Cybersecurity Framework 2.0: Informative References Quick-Start Guide.' This document aims to clarify the concept of informative references within the CSF 2.0, detailing how they link elements of different source documents and support cybersecurity risk management. It introduces NIST's tools for accessing and utilizing these references, including direct downloads, the CSF 2.0 Reference Tool, and the Online Informative References Program, and includes sample use cases and an overview of how AI can assist with reference data.

Organizations utilizing the NIST CSF 2.0 should review this draft guide to understand how informative references can enhance their cybersecurity risk management efforts. The document is open for public comment until May 6, 2026, and feedback can be submitted via email to [email protected] While this is a draft guidance document and not immediately binding, its content will inform the final version of the CSF 2.0 and related resources, impacting how organizations map and leverage external cybersecurity information.

What to do next

Review the draft SP 1347 for understanding of informative references in CSF 2.0
Submit comments on the draft guide by May 6, 2026

Source document (simplified)

Official websites use .gov
A .gov website belongs to an official government
organization in the United States.

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to
the .gov website. Share sensitive information only on official,
secure websites.

Information Technology Laboratory Computer Security Resource Center

Publications

NIST SP 1347 (Initial Public Draft)

NIST Cybersecurity Framework 2.0: Informative References Quick-Start Guide

Documentation Topics

Date Published: March 23, 2026
Comments Due: May 6, 2026
Email Comments to: [email protected]

Author(s)

National Institute of Standards and Technology

Announcement

The Initial Public Draft of SP 1347, NIST Cybersecurity Framework 2.0: Informative References Quick‑Start Guide, explains what informative references are and how they support achieving the outcomes of the NIST Cybersecurity Framework (CSF) 2.0. The guide also introduces readers to NIST tools available for accessing, viewing, and using informative references for cybersecurity risk management, including direct download, the CSF 2.0 Reference Tool, and the Online Informative References Program. The draft contains two sample use cases and provides an overview of how artificial intelligence tools can support reference data use.

Abstract

Informative References identify relationships between elements of different source documents **** and can be consumed in human- or machine-readable formats. For example, within the CSF 2.0, each informative reference indicates one or more parts of another document in which readers can find additional information on the topic (known as a crosswalk). This can be useful as organizations work toward achieving the outcomes of the CSF 2.0. SP 1347, CSF 2.0 Informative References Quick‑Start Guide, explains what informative references are and how they support achieving the outcomes of the CSF 2.0. The guide also introduces readers to NIST tools available for accessing, viewing, and using informative references for cybersecurity risk management, including direct download, the CSF 2.0 Reference Tool, and the Online Informative References Program. The draft contains two sample use cases and provides an overview of how artificial intelligence tools can support reference data use.

Informative References identify relationships between elements of different source documents and can be consumed in human- or machine-readable formats. For example, within the CSF 2.0, each informative reference indicates one or more parts of another document in which readers can find additional... See full abstract