The NIST Cybersecurity Framework (CSF) development process all started with Executive Order (EO)13636 over a decade ago, which called for building a set of approaches (a framework) for reducing risks to critical infrastructure.
Through this EO, NIST was tasked with developing a “Cybersecurity Framework.”
To address current and future cybersecurity challenges and improvements, NIST says it set out on the journey of developing the CSF 2.0.
NIST adds that it has solicited input via formal Requests for Information, workshops and smaller meetings, suggestions from users and non-users alike, and draft documents for public comment.
This all resulted in CSF Versions 1.0 and 1.1 and, most recently, a draft of CSF 2.0.
You can read more here.
