Key concepts
This short guide explains what CSF 2.0 is, the common ways to use it, and what each function covers. Most of its value is as a directory: it points to the full framework, the quick-start guides, informative references, implementation examples and NIST's online reference tools.
How it is organized
- What CSF 2.0 is and how organizations use it
- Core, Organizational Profiles and Tiers in brief
- One page per function: Govern, Identify, Protect, Detect, Respond, Recover
- Where to find more: informative references, implementation examples, the CSF 2.0 Reference Tool
What a school district should take from it
- You do not need to read the full framework to start using it.
- Each function page works as a one-page discussion starter for a cabinet meeting.
How to use it in your district
- Hand it to new cabinet members and board liaisons as their introduction to district cybersecurity.
- Use the function pages as agendas for a six-meeting leadership briefing series.
- Pair each function page with your rubric results for that function.
Common misconceptions
- It is a summary you can cite instead of the framework.
- It is an orientation guide. For decisions and reports, cite CSF 2.0 itself (CSWP 29).
Rubric categories and K12 Cyber Forward tools
Cybersecurity Rubric 2.0 categories
- GV.OCOrganizational Context
- ID.IMImprovement
Tools in the program portal
- Guide: NIST CSF 2.0 for school districtsPublic guide
- Cybersecurity Rubric 2.0 assessmentRate the 22 categories and record why
- Board briefA one-page summary for your board
Related publications
- CSF 2.0 (CSWP 29)Cybersecurity Framework 2.0
- SP 1300CSF 2.0 small business quick-start guide
Citation and source
SP 1299, NIST Cybersecurity Framework 2.0: Resource and Overview Guide. National Institute of Standards and Technology. 2024. https://doi.org/10.6028/NIST.SP.1299.
Topics: Frameworks and profiles. This summary was written by the K12 Cyber Forward program team in its own words. NIST is not affiliated with the program and has not reviewed it. The official publication on csrc.nist.gov controls.