Tag

CSF 2.0

Covers the NIST Cybersecurity Framework 2.0, including its expanded scope, the new Govern function, and updated guidance for organizations of all sizes. Posts break down the six core functions, implementation tiers, and practical steps to adopt CSF 2.0 within existing security programs.

posts

NIST Cybersecurity Framework

NIST Cybersecurity Framework: A Practical Guide for 2025

The Framework Nobody Reads — Until After the Breach In February 2024, Change Healthcare suffered a ransomware attack that disrupted pharmacy operations across the United States for weeks. UnitedHealth Group eventually disclosed that the breach affected roughly 100 million individuals — making it one of the largest healthcare data breaches in history.

Carl B. Johnson May 10, 2025 7 min read
NIST Cybersecurity Framework

NIST Cybersecurity Framework: A Practical Guide for 2026

The Framework 87% of Organizations Reference — But Most Implement Poorly When Change Healthcare suffered its catastrophic ransomware attack in early 2024 — ultimately affecting an estimated 100 million individuals — the post-incident analysis pointed to failures that the NIST Cybersecurity Framework was specifically designed to prevent. Missing multi-factor authentication on a critical

Carl B. Johnson Sep 20, 2019 8 min read