NIST Cybersecurity Framework 2.0 Quick-Start Guide for Organizations
Summary
NIST published a Quick-Start Guide (SP 1308, Final) providing organizations with practical guidance for implementing the Cybersecurity Framework 2.0. The guide integrates concepts from enterprise risk management, cybersecurity risk management, and workforce management to help organizations improve communication about cybersecurity risks and make workforce decisions based on risk reality. It applies at both the organization level (managing risks of multiple systems) and the enterprise level (senior leader risk responsibilities).
What changed
NIST released a final Quick-Start Guide (SP 1308) for Cybersecurity Framework 2.0 implementation, targeting organizations and enterprise-level senior leaders. The guide addresses three interconnected domains: cybersecurity risk management, enterprise risk management, and workforce management. It emphasizes agile, continuous workforce adaptation to address emerging threats and technologies.
Organizations seeking to improve their cybersecurity risk communication or align workforce decisions with risk-based planning should review this guide as a practical implementation resource. The guide supplements the core CSF 2.0 framework rather than creating new compliance requirements.
Archived snapshot
Apr 20, 2026GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.
Official websites use .gov
A .gov website belongs to an official government
organization in the United States.
Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to
the .gov website. Share sensitive information only on official,
secure websites.
Information Technology Laboratory Computer Security Resource Center
- Publications
NIST SP 1308
NIST Cybersecurity Framework 2.0: Cybersecurity, Enterprise Risk Management, and Workforce Management Quick-Start Guide
Date Published: March 2026
Author(s)
National Institute of Standards and Technology
Abstract
This Quick-Start Guide (QSG) draws on concepts and practices from enterprise risk management, cybersecurity risk management, and workforce management to help organizations improve communication about cybersecurity risks and to plan and implement workforce decisions based upon risk reality and planned risk responses. The scope of this QSG will vary depending on the user, but generally applies at the organization level, where cybersecurity risks of multiple systems are managed, and at the enterprise level, where senior leaders take on unique risk management responsibilities spanning multiple organizations. This QSG addresses the need for agile, continuous workforce adaptation to rapidly evolve for emerging threats and technologies.
This Quick-Start Guide (QSG) draws on concepts and practices from enterprise risk management, cybersecurity risk management, and workforce management to help organizations improve communication about cybersecurity risks and to plan and implement workforce decisions based upon risk reality and...
Keywords
NIST Cybersecurity Framework (CSF) 2.0; enterprise risk management; workforce development; NICE Framework.
Control Families
None selected
Documentation
Publication:
https://doi.org/10.6028/NIST.SP.1308
Download URL
Supplemental Material:
CSF 2.0 QSGs
Document History:
03/23/26: SP 1308 (Final)
Related changes
Get daily alerts for NIST Publications
Daily digest delivered to your inbox.
Free. Unsubscribe anytime.
About this page
Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission
Source document text, dates, docket IDs, and authority are extracted directly from NIST.
The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.
Classification
Who this affects
Taxonomy
Browse Categories
Get alerts for this source
We'll email you when NIST Publications publishes new changes.
Subscribed!
Optional. Filters your digest to exactly the updates that matter to you.