# What is the NIST Cybersecurity Framework 2.0?

It is a free framework from the US National Institute of Standards and Technology (NIST) that describes the cybersecurity outcomes an organisation should aim for. The outcomes are organised into the functions Govern, Identify, Protect, Detect, Respond and Recover. Version 2.0 added Govern, which covers strategy, roles, policy, risk management and supply-chain risk, and widened the framework from critical infrastructure to organisations of every size and sector. It is not a certification and does not prescribe tools; you describe your current profile, decide a target profile and plan how to close the gap, with implementation tiers describing how mature your approach is. European companies use it as a clear structure even though it is not EU law, often alongside ISO/IEC 27001 and NIS2, to which it maps well. Network detection belongs mainly under Detect, through continuous monitoring and analysis of adverse events, and supports Respond with information about what happened. NetSenX covers part of Detect on the segments it watches: beaconing, scanning, lateral movement and unusual outbound volume, on every plan. Govern, Protect and Recover need other measures.

FAQ: [Security standards: ISO 27001, SOC 2](https://netsenx.com/en/faq/standards) · https://netsenx.com/en/faq/what-is-nist-csf-2

## Read next

- https://netsenx.com/en/compliance
- https://netsenx.com/en/security
- https://netsenx.com/en/nis2-readiness

## Related questions

- [What is BSI IT-Grundschutz?](https://netsenx.com/en/faq/what-is-bsi-it-grundschutz)
- [What is the difference between a certification and an attestation report?](https://netsenx.com/en/faq/certification-vs-attestation-what-is-the-difference)
- [How do we prepare for our first ISO 27001 certification audit?](https://netsenx.com/en/faq/how-to-prepare-for-a-first-iso-27001-audit)
- [What is ISO/IEC 27001, in plain terms?](https://netsenx.com/en/faq/what-is-iso-27001)
- [What is an information security management system?](https://netsenx.com/en/faq/what-is-an-isms)