Skip to main content

Global compliance research

Compare requirements

Compare up to four records before opening the official authority or scheme guidance. A comparison does not establish which requirements apply to your organization.

Educational comparison · draft fields remain unverified
ComparisonNIST Cybersecurity Framework 2.0
TypeFramework
Review statusOverview verified 2026-09-27
JurisdictionInternational standards and frameworks
Authority / scheme ownerNational Institute of Standards and Technology
Potential applicabilityOrganizations of any size and sector can use CSF to manage cybersecurity risk. Adoption is generally voluntary; a contract or sector-specific rule may reference it.
Application / assessmentDefine the organizational context, build a Current Profile, choose a Target Profile and prioritize gaps. Use the official quick-start guides and reference tools.
Preparation evidence
  • Record the organizational scope and stakeholders for the CSF profile.
  • Document the Current Profile and desired Target Profile.
  • Assign owners and evidence to prioritized improvement actions.
RenewalThere is no NIST-issued CSF certificate to renew. Review the profile as risks, services and business needs change.
Current edition / statusCSF 2.0
Next review2026-12-27
Official next stepOfficial application or guidance
ChecklistDownload reviewed preparation checklist (.txt)

On small screens, scroll the table horizontally to compare each requirement. Verified means the published overview was checked against its named sources. It does not mean your organization is compliant, certified or licensed.

Compare licenses and compliance requirements | QuickTrust