ISACA

2026-09-16

Today · ISACA CISA

NIST CSF 2.0 continues to serve as the primary cybersecurity risk management framework for CISA practitioners, reinforcing alignment with ISACA's governance and risk competency requirements. The framework remains central to compliance and audit planning for 2026.

→NIST CSF 2.0 Relevance for CISA Practitioners: CISA professionals must ensure their risk management assessments and audit procedures map to NIST CSF 2.0 functions to maintain alignment with current industry standards and organizational governance expectations.

Review your current audit programs and control assessments to confirm they explicitly reference and align with NIST CSF 2.0 functions and outcomes.

Signals in this digest

Top Cybersecurity Frameworks: NIST, DORA & More (2026)

## 1. NIST Cybersecurity Framework 2.0 The NIST Cybersecurity Framework 2.0, released in February 2024, provides outcomes-based guidance for managing cybersecurity risk. It is designed for organizations of any size and in any sector. CSF-nist 2 cyber framework outline Source: nist.gov ### The framework is organized around six functions: Govern Identify Protect Detect Respond Recover [...] ## What is a cybersecurity framework? A cybersecurity framework gives an organization a struc