NIST Cybersecurity Framework 2.0 Profiles and Resources
Summary
The National Institute of Standards and Technology (NIST) has released updated resources for its Cybersecurity Framework (CSF) 2.0, including organizational profile templates and community profiles. These resources aim to help organizations assess and improve their cybersecurity posture.
What changed
NIST has made available new and updated resources related to the Cybersecurity Framework (CSF) 2.0. This includes a customizable organizational profile template in spreadsheet format, designed to assist organizations in creating and comparing their current and target cybersecurity profiles to identify gaps. Additionally, NIST highlights community profiles, which are baseline CSF outcomes developed to address shared interests among multiple organizations, and provides links to various active and finalized community profile projects across different sectors.
These resources are intended to guide organizations in implementing and refining their cybersecurity strategies using the CSF 2.0. While the framework itself is non-binding, the availability of these templates and examples offers practical tools for entities seeking to enhance their cybersecurity risk management. No specific compliance deadlines or penalties are associated with these guidance materials, but they are valuable for entities looking to adopt or improve their adherence to cybersecurity best practices.
What to do next
- Review the NIST CSF 2.0 Organizational Profile template for potential use in assessing current and target cybersecurity states.
- Explore available CSF 2.0 Community Profiles to identify sector-specific or shared interest baselines.
- Consult the provided quick start guides and community profile templates for implementation assistance.
Source document (simplified)
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Cybersecurity Framework
Connect with us
CSF 2.0 Profiles
Share
CSF 2.0 Organizational Profiles
NIST provides a customizable CSF Organizational Profile template as a spreadsheet. You can download and use it to create Current and Target Profiles for your organization. The template facilitates side-by-side comparison of Current and Target Profiles to identify and analyze gaps. For more information on how to complete this template please visit the quick start guide.
Access Profile Template | XLSX
CSF 2.0 Community Profiles
A Community Profile ** is a baseline of CSF outcomes that is created and published to address shared interests and goals among a number of organizations. For more information on how to create a Community Profile, view the CSF 2.0 Guide to Creating Community Profiles and the draft Community Profile Template (XLSX).
View All CSF 2.0 Community Profiles
CSF 2.0 Community Profiles
Active Community Profile Projects:
- Transit Cybersecurity Framework Community Profile
- Cybersecurity and AI Workshop Concept Paper
- Ransomware Risk Management: A Cybersecurity Framework 2.0 Community Profile
- Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services
- Cybersecurity Framework Version 2.0 Semiconductor Manufacturing Profile
- Cybersecurity Framework 2.0 Manufacturing Profile
Finalized Community Profile Projects:
- Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile
- CSA Cloud Controls Matrix V4.0: A CSF 2.0 Cloud Community Profile – Cloud Security Alliance
- CRI Profile for the Financial Sector - Cyber Risk Institute
- Routing Security Profile - CableLabs' Cable Routing Engineering for Security and Trust Working Group (CREST WG)
- Telco Profile - Seemless Transition View the Archive for CSF 1.1 and CSF 1.0 Community Profiles
Resources for Applying NIST Frameworks
The NIST National Cybersecurity Center of Excellence (NCCoE) plays a significant role in helping communities implement NIST Frameworks. This collection of resources serves as a repository of guidance for creating Community Profiles and additional materials to support applying NIST Frameworks. Visit to Learn More
Created February 20, 2024, Updated February 19, 2026
Related changes
Source
Classification
Who this affects
Taxonomy
Browse Categories
Get Security Framework alerts
Weekly digest. AI-summarized, no noise.
Free. Unsubscribe anytime.
Get alerts for this source
We'll email you when NIST Cybersecurity Framework Updates publishes new changes.