On February 26, 2024, the National Institute of Standards and Technology (“NIST”) revamped its Cybersecurity Framework (“NIST CSF 2.0”) to assist organizations in reducing risk when developing and managing their cybersecurity program1. The NIST CSF 2.0 guidance includes a new cybersecurity governance core function and emphasizes the importance of identifying and managing cybersecurity risks arising from an organization’s supply chain2. NIST CSF 2.0 also provides organizations with a “suite of resources” to help organizations of all sizes and industries meet their cybersecurity goals3