One of the major updates to CSF 2.0 is the creation of the Govern Function, highlighting the importance of ensuring cybersecurity capabilities support the broader mission through Enterprise Risk Management (ERM).

Governance is the process of determining enterprise objectives, setting direction to achieve those objectives, and monitoring performance to adjust strategy as necessary. Risk governance provides the transparency, responsibility, and accountability that enables managers to effectively manage risk. NIST recently updated a series of publications on integration of Cybersecurity and ERM to align with revisions to CSF 2.0, which can be found here: NIST IR 8286.

In the second webinar of NIST’s new multi-part CSF 2.0 webinar series, we will provide a discussion covering:

• Defining and demystifying governance.
• The role of the Govern Function in a cybersecurity-focused framework.
• Strategies for bidirectional communication between cybersecurity practitioners and leadership using best practice governance models.
• How organizations of all sizes can put cybersecurity governance into practice using the CSF 2.0.
• How you can use the CSF in conjunction with other NIST publications (such as NIST IR 8286 Parts A-D, SP 800-37r2, etc.) to better integrate cybersecurity and enterprise risk management for governance oversight. 
• Where to find CSF 2.0 implementation resources in support of cybersecurity governance.

Time will be reserved at the end for audience questions.

Speakers:

• Julie Chua, Division Chief, Applied Cybersecurity Division, NIST
• Nahla Ivy, Enterprise Risk Management Officer, Office of Financial Resources Management, NIST
• Daniel Eliot, Lead for Small Business Engagement, Applied Cybersecurity Division, NIST 

Related Video

Created September 3, 2025, Updated September 9, 2025