Cherilyn Pascoe

Featured in: Favicon

brookings.edu

Articles

The NIST Cybersecurity Framework (CSF) 2.0 (Polish translation)

Nov 12, 2024 | nist.gov | Cherilyn Pascoe |Stephen Quinn |Karen Scarfone

The NIST Cybersecurity Framework (CSF) 2.0 provides guidance to industry, government agencies, and other organizations to manage cybersecurity risks. It offers a taxonomy of high-level cybersecurity outcomes that can be used by any organization — regardless of its size, sector, or maturity — to better understand, assess, prioritize, and communicate its cybersecurity efforts. The CSF does not prescribe how outcomes should be achieved.
NIST Cybersecurity Framework 2.0: Quick-Start Guide for Using the CSF Tiers

Oct 21, 2024 | nist.gov | Stephen Quinn |Cherilyn Pascoe |Matthew Barrett |Karen Scarfone

This Quick-Start Guide describes how to apply the CSF 2.0 Tiers. CSF Tiers can be applied to CSF Organizational Profiles to characterize the rigor of an organization's cybersecurity risk governance and management outcomes.
Portuguese Translation of the NIST Cybersecurity Framework 2.0

Jun 5, 2024 | nist.gov | Cherilyn Pascoe |Stephen Quinn |Karen Scarfone

Citation NIST International Cybersecurity and Privacy Resources Site Pub Type Websites Citation Pascoe, C. , Quinn, S. and Scarfone, K.
NIST Cybersecurity Framework 2.0: Quick-Start Guide for Creating and Using Organizational Profiles

Feb 26, 2024 | nist.gov | Cherilyn Pascoe |Stephen Quinn |Karen Scarfone

The CSF 2.0 represents a suite of resources (documents and applications) that can be used individually, together, or in combination over time as cybersecurity needs change and capabilities evolve. NIST's materials are designed to reach all audiences and to span across industries and organization types—and this new set of Quick Start Guides focus on popular ways 'how' the CSF can be implemented for the goal of implementing and accessing security solutions quickly.
The NIST Cybersecurity Framework (CSF) 2.0

Feb 26, 2024 | nist.gov | Cherilyn Pascoe |Stephen Quinn |Karen Scarfone

The NIST Cybersecurity Framework (CSF) 2.0 provides guidance to industry, government agencies, and other organizations to manage cybersecurity risks. It offers a taxonomy of high-level cybersecurity outcomes that can be used by any organization — regardless of its size, sector, or maturity — to better understand, assess, prioritize, and communicate its cybersecurity efforts. The CSF does not prescribe how outcomes should be achieved.
The NIST Cybersecurity Framework 2.0 post-9/11 | TechTank Podcast

Sep 11, 2023 | brookings.edu | Nicol Turner Lee |Cherilyn Pascoe

The National Institute of Standards and Technology (NIST) will soon release an updated draft of the existing U.S. cybersecurity framework. Mandated by the White House and Congress, the draft of the NIST Cybersecurity Framework (CSF) 2.0 will present a more agile and adaptive version to account for existing and emerging technologies. Through November 2023, NIST is accepting public comment on CSF 2.0, which is a tremendous undertaking after years of maintaining the same guidance.