Cybersecurity Framework 2.0 Manufacturing Profile: NIST IR 8183r2 Initial Public Draft
September 29, 2025

NIST has released the initial public draft of NIST IR 8183 Revision 2, Cybersecurity Framework 2.0 Manufacturing Profile.

The Manufacturing Profile is aligned with manufacturing sector goals and industry best practices and can be used as a roadmap for reducing cybersecurity risk for manufacturers. The Manufacturing Profile provides a voluntary, risk-based approach for managing cybersecurity activities and reducing cyber risk to manufacturing systems and is meant to enhance but not replace current cybersecurity standards and industry guidelines.

This revision of the CSF Manufacturing Profile provides the following updates:

• Realigned guidance to CSF 2.0 Functions, including guidance for the new Govern Function
• Realigned guidance to CSF 2.0 Categories (changed from 23 in CSF 1.1 to 22 in CSF 2.0)
• Realigned guidance to CSF 2.0 Subcategories (changed from 108 in CSF 1.1 to 106 in CSF 2.0)
• Added guidance for CSF 2.0 supply chain risk management, platform security, and technology infrastructure resilience Categories

We invite you to review this document and provide comments by November 17, 2025.