NIST Cybersecurity Framework (CSF)
A voluntary US framework of cybersecurity functions published by NIST.
The NIST Cybersecurity Framework is a voluntary set of functions — Govern, Identify, Protect, Detect, Respond, Recover — originally published for critical infrastructure and now widely used by any organisation. CSF 2.0 (February 2024) added the Govern function. CSF is not certifiable; it is a maturity model used internally or in RFPs.