The DOI matches its Crossref record.
The NIST Cybersecurity Framework (CSF) 2.0
Open accessAbstract
The NIST Cybersecurity Framework (CSF) 2.0 provides guidance to industry, government agencies, and other organizations to manage cybersecurity risks. It offers a taxonomy of high-level cybersecurity outcomes that can be used by any organization — regardless of its size, sector, or maturity — to better understand, assess, prioritize, and communicate its cybersecurity efforts. The CSF does not prescribe how outcomes should be achieved. Rather, it links to resources that provide additional guidance on practices and controls that could be used to achieve those outcomes. This document explains CSF 2.0 and its components and describes some of the many ways that it can be used.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Complementary to ZTA, the NIST Cybersecurity Framework 2.0 released in 2024 [6] and the Cybersecurity Performance Goals [3] provide actionable implementation guidance for organizations initiating trust transformation programs in OT environments.”
From Zero Trust Architecture for Smart Factories: Securing Digital Twins and Cyber-Physical OT Systems (2026) · cites this paper as [6]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“The NIST Cybersecurity Framework 2.0, released in 2024, further embeds these principles within a broader enterprise risk governance structure applicable to critical infrastructure sectors including manufacturing.[6]”
From Zero Trust Architecture for Smart Factories: Securing Digital Twins and Cyber-Physical OT Systems (2026) · cites this paper as [6]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“The proposed architecture is explicitly designed to align with and extend the IEC 62443 industrial security standard and NIST CSF 2.0, enabling organizations with existing compliance programs to adopt this framework as a coherent extension rather than a competing model.[4], [6], [8]”
From Zero Trust Architecture for Smart Factories: Securing Digital Twins and Cyber-Physical OT Systems (2026) · cites this paper as [6]
Experimental — accuracy not yet measuredThe cited source says what the claim attributes to it.
In the citing paper
“The architecture proposed in this study aligns structurally with NIST CSF 2.0, and suggests potential validity and practical applicability as a strategic security model [2].”
From Towards Secure Legacy Manufacturing: A Policy-Driven Zero Trust Architecture Aligned with NIST CSF 2.0 (2025) · cites this paper as [2]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Still being checked.
Cited by
Sorted by citations
Incident response recommendations and considerations for cybersecurity risk management :
Nelson, A. J., Rekhi, S. J., Souppaya, M., & Scarfone, K. A. (2025) · doi:10.6028/nist.sp.800-61r3 · Cited by 141
Managing workplace AI risks and the future of work
Howard, J., & Schulte, P. A. (2024) · American Journal of Industrial Medicine · doi:10.1002/ajim.23653 · Cited by 59
Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations
Boyens, J. M. (2024) · doi:10.6028/nist.sp.800-161r1-upd1 · Cited by 52
Cybersecurity in smart agriculture: A systematic literature review
Campoverde‐Molina, M., & Luján‐Mora, S. (2024) · Computers & Security · doi:10.1016/j.cose.2024.104284 · Cited by 47
VISTA: An inclusive insider threat taxonomy, with mitigation strategies
Renaud, K., Warkentin, M. E., Pogrebna, G., & van der Schyff, K. (2023) · Information & Management · doi:10.1016/j.im.2023.103877 · Cited by 38
Yijie Weng1, J. W. (2024) · International Journal of Frontiers in Engineering Technology · doi:10.25236/ijfet.2024.060203 · Cited by 34
Implementing a zero trust architecture :
Borchert, O., Howell, G., Kerman, A., Rose, S., & Souppaya, M. (2025) · doi:10.6028/nist.sp.1800-35 · Cited by 33
eGridGPT: Trustworthy AI in the Control Room
Choi, S., Jain, R., Emami, P., Wadsack, K. E., Ding, F., Sun, H., Gruchalla, K., Hong, J., Zhang, H., Zhu, X., et al. (2024) · OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information) · doi:10.2172/2352232 · Cited by 30
Secure software development practices for generative AI and dual-use foundation models:
Souppaya, M., Vassilev, A. T., Ogata, M., Stanley, M., & Scarfone, K. A. (2024) · doi:10.6028/nist.sp.800-218a · Cited by 26
Cybersecurity and Privacy Issues in Extended Reality Health Care Applications: Scoping Review
Lake, K., Kittrick, A. M., Desselle, M. R., Bó, A. P. L., Abayasiri, R. A. M., Fleming, J., Baghaei, N., & Kim, D. S. (2024) · JMIR XR and spatial computing. · doi:10.2196/59409 · Cited by 23
Kampourakis, K. E., Gkioulos, V., Kavallieratos, G., & Lin, J. (2025) · International Journal of Information Security · doi:10.1007/s10207-025-01113-0 · Cited by 22
Considerations for Achieving Crypto Agility: Strategies and Practices
Barker, E., Chen, L., Regenscheid, A., Moody, D., Newhouse, W., Kent, K., Barker, W., Cooper, D., Souppaya, M., Housley, R., et al. (2025) · doi:10.6028/nist.cswp.39 · Cited by 28
RetractedMeasurement guide for information security volume 1 :
Schroeder, K., DUY, H. T., & Pillitteri, V. Y. (2024) · doi:10.6028/nist.sp.800-55v1 · Cited by 17
Ostermann, M., Mathias, R., Jahed, F., Parker, M., Hudson, F. D., Harding, W. C. B., Gilbert, S., & Freyer, O. (2025) · Computational and Structural Biotechnology Journal · doi:10.1016/j.csbj.2025.07.024 · Cited by 16
Security Modelling for Cyber-Physical Systems: A Systematic Literature Review
Huang, S.-T., POSKITT, C. M., & Shar, L. K. (2025) · ACM Transactions on Cyber-Physical Systems · doi:10.1145/3776549 · Cited by 15
Longo, G., Lupia, F., Merlo, A., Pagano, F., & Russo, E. (2024) · Information Sciences · doi:10.1016/j.ins.2024.121534 · Cited by 16
Building a cybersecurity and privacy learning program
Hansche, S., Ellis, B., Sanchez-Cherry, K., Snyder, J. N., & Walden, D. (2024) · doi:10.6028/nist.sp.800-50r1 · Cited by 14
Considerations for Achieving Crypto Agility:
Barker, E. B. (2026) · doi:10.6028/nist.cswp.39-upd1 · Cited by 19
ALDhanhani, E. A. M. J. (2021) · Türk bilgisayar ve matematik eğitimi dergisi · doi:10.17762/turcomat.v12i11.5954 · Cited by 11
Integrating cybersecurity and enterprise risk management (ERM)
Quinn, S. D., Chua, J., Ivy, N., Gardner, R. K., Scarfone, K. A., Smith, M. C., & Witte, G. (2025) · doi:10.6028/nist.ir.8286r1 · Cited by 11
Toward effective cybersecurity management: a hierarchical process model with performance assessment
Liu, M., Shore, M., Yeoh, W., Jiang, F., & Zeadally, S. (2025) · Journal of Cybersecurity · doi:10.1093/cybsec/tyaf020 · Cited by 10
Guidelines for API protection for cloud-native systems
Chandramouli, R., & Butcher, Z. (2025) · doi:10.6028/nist.sp.800-228 · Cited by 9
Network Intrusion Response using Deep Reinforcement Learning in an Aircraft IT-OT Scenario
Reaney, M., McLaughlin, K., & Grant, J. (2024) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3664476.3670917 · Cited by 8
Evangelatos, S., Veroni, E., Konidi, M., Καραγιώργου, Σ., Δέδε, Γ., Baklezos, A. T., Nikolopoulos, C. D., Sarigiannidis, P. G., & Goudos, S. K. (2025) · IEEE Access · doi:10.1109/access.2025.3559428 · Cited by 8
Stentoft, J., Peressotti, M., Mayer, P. B., Jensen, K. W., Schmitt, O., Keating, V. C., Theussen, A., Tumchewics, L. A., & Kankam-Boateng, J. (2025) · Supply Chain Management An International Journal · doi:10.1108/scm-11-2024-0765 · Cited by 8
Analyzing and Categorizing Emerging Cybersecurity Regulations
Marotta, A., & Madnick, S. (2025) · ACM Computing Surveys · doi:10.1145/3757318 · Cited by 8
Learning from safety science: designing incident reporting systems in cybersecurity
Ebert, N., Schaltegger, T., Ambuehl, B., Geppert, T., Keller, A., Knieps, M., & Zimmermann, V. (2025) · Journal of Cybersecurity · doi:10.1093/cybsec/tyaf019 · Cited by 8
Gaba, G. S., Sari, A., Bütün, İ., Singh, P., Gurtov, A., & Liyanage, M. (2025) · IEEE Open Journal of the Communications Society · doi:10.1109/ojcoms.2025.3616289 · Cited by 8
Avrahami, Z., & Zwilling, M. (2025) · International Journal of Information Security · doi:10.1007/s10207-025-01096-y · Cited by 8
Cybersecurity for Smart Inverters:
McCarthy, J., Marron, J., Faatz, D., Rebori-Carretero, D., Wiltberger, J., & Urlaub, N. (2023) · doi:10.6028/nist.ir.8498.ipd · Cited by 8
Foundational Cybersecurity Activities for IoT Product Manufacturers
Fagan, M. J. (2025) · doi:10.6028/nist.ir.8259r1 · Cited by 12
BustamanteV, D., Sanchez, L. E., Rosado, D. G., Santos-Olmo, A., & Fernández‐Medina, E. (2025) · Computers & Security · doi:10.1016/j.cose.2025.104650 · Cited by 7
ROMANENKO, K. (2026) · Національні інтереси України. · doi:10.52058/3041-1793-2026-1(18)-1308-1320 · Cited by 7
Mapping relationships between documentary standards, regulations, frameworks, and guidelines :
Scarfone, K. A., Souppaya, M., & Fagan, M. E. (2023) · doi:10.6028/nist.ir.8477 · Cited by 7
Incident Response Recommendations and Considerations for Cybersecurity Risk Management:
Nelson, A. J. (2024) · doi:10.6028/nist.sp.800-61r3.ipd · Cited by 7
RetractedMeasurement guide for information security volume 2 :
Schroeder, K., DUY, H. T., & Pillitteri, V. Y. (2024) · doi:10.6028/nist.sp.800-55v2 · Cited by 7
Considerations for Achieving Cryptographic Agility:
Barker, E., Chen, L., Cooper, D., Moody, D., Regenscheid, A., Souppaya, M., Newhouse, B., Housley, R., Turner, S., Barker, W., et al. (2025) · doi:10.6028/nist.cswp.39.2pd · Cited by 9
RetractedIdentifying and estimating cybersecurity risk for enterprise risk management
Quinn, S., Ivy, N., Barrett, M., Feldman, L., Witte, G., & Gardner, R. (2025) · doi:10.6028/nist.ir.8286ar1 · Cited by 7
Guidelines for API protection for cloud-native systems
Chandramouli, R., & Butcher, Z. (2026) · doi:10.6028/nist.sp.800-228-upd1 · Cited by 7
Cybersecurity Risks of AI-Generated Code
Ji, J., Jun, J., Wu, M., & Gelles, R. (2024) · doi:10.51593/2023ca010 · Cited by 7
Cybersecurity governance and organizational resilience: A framework for sustainable risk management
Alharbi, T. S. (2025) · EDPACS · doi:10.1080/07366981.2025.2596943 · Cited by 6
Scientific assessment for urban air mobility (UAM)
Schuchardt, B. I., Andreeva-Mori, A., Kopardekar, P. H., Kramar, V., Murphy, J., Murça, M. C. R., & Sziroczák, D. (2026) · CEAS Aeronautical Journal · doi:10.1007/s13272-025-00936-w · Cited by 6
Cybersecurity risk assessment in OT systems using attack graphs
Unger, S., Arzoglou, E., Heinrich, M., Scheuermann, D., & Katzenbeisser, S. (2026) · International Journal of Information Security · doi:10.1007/s10207-025-01198-7 · Cited by 6
Rambau, T. M., Munyoka, W., Phahlamohlaka, L. J., & Kadyamatimba, A. (2026) · Information and Computer Security · doi:10.1108/ics-09-2025-0376 · Cited by 6
Cybersecurity Frameworks in Healthcare Data: Short Literature Review
Adnan, M., Kutafina, E., & Beyan, O. (2024) · Studies in health technology and informatics · doi:10.3233/shti240403 · Cited by 6
Bhatt, P., Valecha, R., & Rao, H. (2025) · International Journal of Information Management · doi:10.1016/j.ijinfomgt.2025.102902 · Cited by 6
Min, C.-H., Kim, D.-H., Yang, H., & Kwak, J. (2025) · Electronics · doi:10.3390/electronics14204109 · Cited by 6
Bridging Theory and Practice: Addressing Current Cybersecurity Gaps in Industry 5.0
Sheikhi, S., Eceiza, M., Arellano, C., López, O. G., Kelnberger, S., Lindner, R., Partanen, J. O., & Lovén, L. (2025) · IEEE Access · doi:10.1109/access.2025.3569130 · Cited by 5
Choubey, M., Mishra, S., & Bansal, S. (2026) · Journal of Ambient Intelligence and Humanized Computing · doi:10.1007/s12652-026-05046-x · Cited by 5
Alluri, A. K. K. V. (2026) · International Journal of Emerging Trends in Computer Science and Information Technology · doi:10.63282/3050-9246.ijetcsit-v7i1p153 · Cited by 5
Transforming Information Systems Management: A Reference Model for Digital Engineering Integration
Bonar, J., & Hastings, J. D. (2024) · Cyber Awareness and Research Symposium (CARS) · doi:10.1109/cars61786.2024.10778791 · Cited by 5
AI-based threat detection in critical infrastructure: A case study on smart grids
Eze, E. C., Durotolu, G. A., John, F. D., & Raji, S. O. (2025) · World Journal of Advanced Research and Reviews · doi:10.30574/wjarr.2025.27.1.2655 · Cited by 5
Model Tata Kelola TI Terintegrasi untuk Keamanan Informasi di Sektor Fintech
Lestari, M., Puspita, M. E., Wijaya, A. F., & Vicky (2025) · Jurnal Teknologi dan Manajemen Industri Terapan · doi:10.55826/jtmit.v4i3.943 · Cited by 5
National Online Informative References (OLIR) program:
Keller, N., Barrett, M., Quinn, S., Scarfone, K. A., Smith, M. C., & Johnson, V. (2024) · doi:10.6028/nist.ir.8278r1 · Cited by 5
Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight
Quinn, S. (2025) · doi:10.6028/nist.ir.8286cr1.ipd · Cited by 5
RetractedIntegrating Cybersecurity and Enterprise Risk Management (ERM)
Quinn, S. (2025) · doi:10.6028/nist.ir.8286r1.ipd · Cited by 5
RetractedIdentifying and Estimating Cybersecurity Risk for Enterprise Risk Management
Quinn, S. (2025) · doi:10.6028/nist.ir.8286ar1.ipd · Cited by 5
RetractedTrusted internet of things (IoT) device network-layer onboarding and lifecycle management: :
Fagan, M. E., Marron, J. A., Souppaya, M., Watrobski, P., Barker, W., Deane, C., Klosterman, J., Mulugeta, B., Rearick, C., Symington, S., et al. (2025) · doi:10.6028/nist.sp.1800-36 · Cited by 5
KPI-Based Evaluation Framework for Cyber Resilience of Ships
Ko, A., Lee, J. H., & Seo, J. T. (2025) · IEEE Access · doi:10.1109/access.2025.3550501 · Cited by 4
Encrypted machine learning-based model predictive control architectures for nonlinear systems
Khodaverdian, A., Wu, G., Wu, Z., & Christofides, P. D. (2025) · Computers & Chemical Engineering · doi:10.1016/j.compchemeng.2025.109166 · Cited by 4
Bürger, M., Nitsche, A.-M., Morgner, R., & Arlinghaus, J. C. (2025) · Advances in supply management · doi:10.1007/978-3-658-48750-8_6 · Cited by 4
Navigating the Cyber Landscape: Saudi Arabia’s Cybersecurity Standards and Implementation Barriers
Gambo, M. L., Danasabe, A., Binbeshr, F., Imam, M., Shinwari, M., & Mahmoud, A. S. H. (2025) · Arabian Journal for Science and Engineering · doi:10.1007/s13369-025-10765-y · Cited by 4
Sobĕslav, V., Čech, P., Horálek, J., Ponce, D., & Urbanik, P. (2026) · Journal of Cases on Information Technology · doi:10.4018/jcit.399500 · Cited by 4
Hilger, R. P. (2026) · Journal of Cybersecurity · doi:10.1093/cybsec/tyag011 · Cited by 4
Mazhar, C. B. (2026) · Nexus Science Review · doi:10.66104/berfcb18 · Cited by 4
Tanjung, D. F., Nurhayati, O. D., & Wibowo, A. (2024) · International Journal of Innovative Science and Research Technology (IJISRT) · doi:10.38124/ijisrt/ijisrt24jun1212 · Cited by 4
Ayodele, O. F., & Adelaja, A. O. (2024) · World Journal of Advanced Research and Reviews · doi:10.30574/wjarr.2024.24.2.3312 · Cited by 4
Cybersecurity Of Work From Anywhere Model For Government : A Systematic Literature Review
Asyrofi, M. F., & Nugraha, I. G. D. (2025) · International Journal of Electrical, Computer, and Biomedical Engineering · doi:10.62146/ijecbe.v3i1.113 · Cited by 5
Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems
Licata, J., McWhite, R., Calloway, L., & Gilbert, D. (2025) · doi:10.6028/nist.sp.800-18r2 · Cited by 4
In-depth Analysis of Cloud Security - Significance, Service Providers, and NIST Standards_preprintPreprint
Makoshi, S. M. (2025) · doi:10.22541/au.175192230.05564058/v1 · Cited by 4
Staging cybersecurity risks for enterprise risk management and governance overs
Quinn, S., Ivy, N., Barrett, M., Smith, M. C., Gardner, R., & Witte, G. (2025) · doi:10.6028/nist.ir.8286cr1 · Cited by 4
Secure Software Development Framework (SSDF) Version 1.2
Booth, H. (2025) · doi:10.6028/nist.sp.800-218r1.ipd · Cited by 4
MoghadasNian, S. (2026) · doi:10.24108/preprints-3115180 · Cited by 4
Ibáñez, E., Dahbura, A. T., Lbath, A., Blanco, M., & Chan, N. (2025) · Academia Engineering · doi:10.20935/acadeng7731 · Cited by 3
Measuring an individual’s level of personal cyber security
Baráth, J., Harakal, M., Benčík, M., Ďulík, M., & Révay, M. (2025) · Communication and Information Technologies (KIT) · doi:10.1109/kit67756.2025.11205448 · Cited by 3
Metasystem for Maritime Cybersecurity Management During Digital Transformation at Sea
Mrozowska, A. (2025) · TransNav the International Journal on Marine Navigation and Safety of Sea Transportation · doi:10.12716/1001.19.03.02 · Cited by 3
Arslan, U. (2025) · Ufuk Üniversitesi Sosyal Bilimler Enstitüsü Dergisi · doi:10.58635/ufuksbedergi.1798697 · Cited by 3
Tantaroudas, N. D., Karachalios, I., & McCracken, A. J. (2026) · Open Research Europe · doi:10.12688/openreseurope.22957.1 · Cited by 3
Ogunwola, T. A. (2026) · IARJSET · doi:10.17148/iarjset.2025.12150 · Cited by 3
Ward, D. D. (2026) · International Journal of Soft Computing and Engineering · doi:10.35940/ijsce.c3723.16030726 · Cited by 3
Burkhardt, H. A., Blach, S., Burugapalli, S. R., Cartwright, B. M. G., Martin, R., Simonov, M., Stewart, S. E., Turner, G., Winegar, A. L., & Stucky, N. L. (2026) · JAMIA Open · doi:10.1093/jamiaopen/ooag142 · Cited by 3
Nazir, M. S. (2026) · doi:10.63125/exzc2653 · Cited by 3
Managing cyber risks in the face of AI- and ML - Driven Adversarial Attacks
Chimamiwa, G. (2024) · doi:10.70301/conf.sbs-jabr.2024.1/1.6 · Cited by 3
The resilience of critical information infrastructure topology in the cyberspace
Dubynskyi, G., & Zubok, V. Y. (2025) · International Science Journal of Engineering & Agriculture · doi:10.46299/j.isjea.20250401.09 · Cited by 3
A generic cryptographic algorithm identification scheme based on ciphertext features
Li, J., Sun, H.-L., Du, Z., Wang, Y., Yuan, K., & Jia, C. (2025) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2025.103984 · Cited by 3
Supporting Software Engineers in IT Security and Privacy through Automated Knowledge Discovery
Ehl, M., Ahmadian, A. S., Großer, K., Elsofi, D. A. A., Herrmann, M., Specht, A., Schneider, K. A., & Jürjens, J. (2025) · ACM Symposium on Applied Computing · doi:10.1145/3672608.3707798 · Cited by 3
Exposing the Gaps: The State of Supply Chain Coverage in Current Security Standards
Mexis, N., Lill, B., Doleh, Y., & Katzenbeisser, S. (2025) · IFIP advances in information and communication technology · doi:10.1007/978-3-031-94924-1_14 · Cited by 3
Banks and ESG pillars score: Does cybersecurity policy matter?
Bruno, E., Iacoviello, G., & Casella, R. (2024) · Corporate Ownership and Control · doi:10.22495/cocv21i3siart1 · Cited by 3
Product Development Cybersecurity Handbook:
Fagan, M. E. (2024) · doi:10.6028/nist.cswp.33.ipd · Cited by 3
Barruga, M. B. (2025) · Journal of Information Systems Engineering & Management · doi:10.52783/jisem.v10i43s.8533 · Cited by 2
An Evaluation of Cybersecurity Risk Management Implementation at Bank Pembangunan XYZ
Apsari, R. D., & Khudri, T. M. Y. (2025) · Greenation International Journal of Economics and Accounting · doi:10.38035/gijea.v3i1.366 · Cited by 2
The Role of Human Factors in Cybersecurity Incident Management
Kincl, J., Adam, M. T. P., & Pavleska, T. (2025) · Lecture notes in computer science · doi:10.1007/978-3-031-92833-8_3 · Cited by 2
Kör, B., Taşkın, N., & Metin, B. (2025) · Journal of Decision System · doi:10.1080/12460125.2025.2522848 · Cited by 2
Gamified or Glorified? A systematic review of serious games for security & privacy in the SDLC
Bellemans, J., Landuyt, D. V., Sion, L., & Desmet, L. (2025) · Information and Software Technology · doi:10.1016/j.infsof.2025.107850 · Cited by 3
Lytvynchuk, A., Tereshchenko, H., Kyrianov, A., Kryvoruchko, Y., & Solohub, Y. (2025) · Educational Analytics of Ukraine · doi:10.32987/2617-8532-2025-2-48-65 · Cited by 2
Kačič, Z., Mongus, D., Golob, I., Vlaovič, B., Frumen, S., & Ješovnik, A. (2025) · doi:10.18690/um.1.2025.11 · Cited by 2
Barruga, B. (2025) · International Journal of Apllied Mathematics · doi:10.12732/ijam.v38i4s.299 · Cited by 2
Integrated maritime protection: Innovation for the safeguarding of maritime systems based on MARISMA
Martínez, F., Sanchez, L. E., Santos-Olmo, A., Rosado, D. G., & Fernández‐Medina, E. (2025) · Computers & Security · doi:10.1016/j.cose.2025.104699 · Cited by 2
Metadata
- Authors
- National Institute of Standards and Technology
- Published
- 2024-02-26
- OpenAlex
- W4385562826
- Cited by
- 266
- References
- 0
- Citations by year
- 2026: 160 · 2025: 73 · 2024: 28
- Type
- report
- Language
- en
- Open access
- gold
- doi.org
- Funders
- Information Technology Laboratory
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Social Sciences › Business, Management and Accounting › Management Information Systems › Information Technology Governance and Strategy
- Social Sciences › Political Science and International Relations › Cybersecurity and Cyber Warfare Studies
- Keywords
- NIST Cybersecurity Framework, cyber risk management, cybersecurity maturity, risk assessment, risk prioritization, cybersecurity controls, cybersecurity practices
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
