NIST CSF 2.0 (Cybersecurity Framework)

The NIST Cybersecurity Framework (CSF) 2.0 is a widely adopted framework that organizes security activities into six functions — Govern, Identify, Protect, Detect, Respond, and Recover.

The NIST CSF provides a common language for managing cybersecurity risk and is referenced across regulated industries. Version 2.0 (2024) added the Govern function, emphasizing organizational oversight and supply-chain risk.

Vigil maps every posture-assessment finding to the relevant NIST CSF outcome, so a finding isn't just 'fix this' — it's traceable to the framework your auditors and board already use.