{"id":3446,"date":"2024-08-01T11:33:00","date_gmt":"2024-08-01T11:33:00","guid":{"rendered":"https:\/\/sectigostore.com\/blog\/?p=3446"},"modified":"2024-07-30T16:18:12","modified_gmt":"2024-07-30T16:18:12","slug":"5-smb-takeaways-from-the-nist-cybersecurity-framework-2-0","status":"publish","type":"post","link":"https:\/\/sectigostore.com\/blog\/5-smb-takeaways-from-the-nist-cybersecurity-framework-2-0\/","title":{"rendered":"5 SMB Takeaways from the NIST Cybersecurity Framework 2.0"},"content":{"rendered":"\n

61% of small businesses<\/a> victims of a cyberattack in 2023 lost over $10,000. Learn how to harden your digital defenses with these five NIST CSF 2.0 key points<\/h2>\n\n\n\n

According to the State of SMB Cybersecurity in 2024 report, 94% of <\/a>small businesses<\/a> (SMBs) have been victims of at least one cybersecurity attack in the past. This marks a 30% increase in just five years.  <\/p>\n\n\n\n

Too many business owners work hard to build their companies, only to hand over the fruits of their labors to cybercriminals. This is why you must take steps to protect your business in the face of growing cyber threats and increasingly complex technologies.<\/p>\n\n\n\n

Don\u2019t fret. The NIST Cybersecurity Framework (or, more specifically, NIST CSF 2.0) is coming to the rescue. In this article, we’ll explore five key takeaways that SMB owners like you can learn from this new framework and discover how to implement them to protect your digital assets and infrastructure from the bad guys. <\/p>\n\n\n\n

What Is the NIST Cybersecurity Framework (CSF) 2.0?<\/h2>\n\n\n\n

The National Institute of Standards and Technology (NIST) released its first major update to the Cybersecurity Framework (CSF) in a decade <\/a>in February 2024<\/a>. Unlike its previous incarnation, NIST CSF 2.0 goes beyond critical infrastructure<\/a> to aid organizations of all sizes and industries in managing and mitigating security risks.<\/p>\n\n\n\n

This new version was developed in response to the U.S. Congress\u2019s explicit request in 2018<\/a> to address small business concerns. Six years later, the NIST Cybersecurity Framework 2.0 was born.<\/p>\n\n\n\n

The update throws a lifeline to the growing number of small and mid-size businesses in the crosshairs of cybercriminals due to their limited resources to invest in robust security protections. It\u2019s a new set of risk-based best practices aimed at all businesses, with a specific focus on SMBs, so they can effectively protect their data and reduce the risk of attacks.<\/p>\n\n\n\n

NIST CSF 2.0 is divided into six functions, providing organizations guidance for effectively managing their cybersecurity risk:<\/p>\n\n\n\n

    \n
  1. Govern<\/strong>. Helps businesses to build and monitor a risk management strategy, expectations, and policy.<\/li>\n\n\n\n
  2. Identify<\/strong>. Explains how businesses should manage cybersecurity risks.<\/li>\n\n\n\n
  3. Protect<\/strong>. Details ways to minimize and contain security incidents.<\/li>\n\n\n\n
  4. Detect<\/strong>. Illustrates how to identify attacks and security issues.<\/li>\n\n\n\n
  5. Respond<\/strong>. Describes how to react to potential attacks promptly.<\/li>\n\n\n\n
  6. Recover<\/strong>. Provides guidance on how to recover in case the worst happens.<\/li>\n<\/ol>\n\n\n\n
    \"The
    Image caption: The screenshot shows the Functions of the NIST CSF 2.0 Framework<\/em>.<\/figcaption><\/figure>\n\n\n\n

    According to NIST<\/a>:<\/p>\n\n\n\n

    \n

    \u201cThe Functions should be addressed concurrently. Actions that support Govern, Identify, Protect, and Detect should all happen continuously, and actions that support Respond and Recover should be ready at all times and happen when cybersecurity incidents occur.\u201d<\/em><\/p>\n<\/blockquote>\n\n\n\n

    What\u2019s Changed? A Look at NIST\u2019s CSF Version 1.1 to Version 2.0<\/h2>\n\n\n\n

    While the biggest change in version 2.0 is the shift from mainly focusing on critical infrastructure to include other types of businesses, including SMBs, it wasn\u2019t the only notable change. Another critical adjustment was the inclusion of the new function category: Govern.<\/p>\n\n\n\n

    Now, we aren\u2019t going to get too into the weeds here about what\u2019s changed from version 1.1 to 2.0. Instead, our goal is to provide a few examples of how this new version of the NIST Cybersecurity Framework can help SMBs boost their cybersecurity.<\/p>\n\n\n\n

    However, if you\u2019re intrigued by the details and want to learn more about the changes from NIST CSF 1.1 to NIST CSF 2.0, check out the following video:<\/p>\n\n\n\n

    \n