Date Published: September 17, 2026
Comments Due:
Email Comments to:
Author(s)
Scott Rose (NIST)
Announcement
Federal agencies that deploy an Open Radio Access Network (O-RAN) as part of their infrastructure must include that deployment in their risk management programs. This draft Cybersecurity Framework (CSF) 2.0 profile describes how components that conform to the security specifications produced by the O-RAN ALLIANCE support various CSF 2.0 outcomes. It also includes references to O-RAN ALLIANCE-produced documents and other relevant guidelines that may help federal agency cybersecurity managers.
The NIST Cybersecurity Framework (CSF) 2.0 is a tool to help organizations manage risk in their operations. The CSF can also be used to develop a profile for communities that have similar risks in their operations. These community profiles can help individual members adapt the CSF to their own internal operations, while also providing a common sense of risk seen by all members of the community. This community profile is aimed at federal agencies wishing to deploy an Open Radio Access Network (Open RAN) as part of their infrastructure. This profile aids agency cybersecurity managers in integrating an Open RAN component to their infrastructure by providing an evaluation of threats and resources. These resources may help cybersecurity managers in producing their internal CSF organizational profile or cybersecurity strategy with regard to their Open RAN deployment.
The NIST Cybersecurity Framework (CSF) 2.0 is a tool to help organizations manage risk in their operations. The CSF can also be used to develop a profile for communities that have similar risks in their operations. These community profiles can help individual members adapt the CSF to their own...
See full abstract
The NIST Cybersecurity Framework (CSF) 2.0 is a tool to help organizations manage risk in their operations. The CSF can also be used to develop a profile for communities that have similar risks in their operations. These community profiles can help individual members adapt the CSF to their own internal operations, while also providing a common sense of risk seen by all members of the community. This community profile is aimed at federal agencies wishing to deploy an Open Radio Access Network (Open RAN) as part of their infrastructure. This profile aids agency cybersecurity managers in integrating an Open RAN component to their infrastructure by providing an evaluation of threats and resources. These resources may help cybersecurity managers in producing their internal CSF organizational profile or cybersecurity strategy with regard to their Open RAN deployment.
Hide full abstract
Keywords
Cybersecurity Framework; CSF; Open RAN; O-RAN; risk; threats
Control Families
None selected
