Leaning into its new role, NIST recently made this cross-industry application official by formally expanding its scope from critical infrastructure to organizations of any type and size. “The CSF was developed for critical infrastructure like the banking and energy industries, but it has proved useful everywhere, from schools and small businesses to local and foreign governments.

Source: Tripwire – The State of Security