NIST seeks public comment on AI quick-start guide for Cybersecurity Framework 2.0

The National Institute of Standards and Technology (NIST) announced the release of Special Publication (SP) 1353 ipd, an initial public draft titled *QuickStart Guide for Using Artificial Intelligence for Cybersecurity Framework (CSF) 2.0 Analysis and Reporting*. The guide is designed to help organizations use AI to analyze, plan, implement, and monitor progress toward achieving CSF 2.0 outcomes. It focuses on providing structured AI prompts as tools for practitioners to create CSF-related artifacts that support CSF outcomes.

The document identifies the current state of practice for AI prompt engineering in CSF implementation and analysis, though it does not aim to prescribe AI best practices or cybersecurity guidelines. Specific precautions are denoted with a /!\ notation where relevant. The guide includes three notional use cases, examples of prompts for structuring natural language inputs to produce specified CSF 2.0 outputs from a generative AI model, and simulated organizational files for a fictitious company.

The first use case demonstrates an AI-assisted review to evaluate an organization’s cybersecurity policy, strategy, and risk governance in alignment with CSF 2.0 outcomes. The second use case shows how to produce a draft *Organization Current State Profile* by mapping artifacts and personnel interview notes to CSF 2.0 outcomes, documenting assumptions, and recording observed gaps. The third use case illustrates how to create a draft *CSF Target State Profile* by drawing on internal and industry references to describe desired outcomes aligned with mission objectives, stakeholder expectations, and risk landscapes.

NIST emphasizes that the use case examples are illustrative and not prescriptive assessment or assurance methodologies. The agency is accepting public comments on the quick-start guide and the supplied AI prompts through October 15, 2026, via email at csf@nist.gov. NIST clarified that it is not seeking comments on the fictional organizational documents, which are included for illustrative purposes only.

This publication is part of a broader portfolio of CSF 2.0 quick-start guides released by the CSF 2.0 project team since February 26, 2024. These resources are intended to provide tailored pathways for different audiences to engage with CSF 2.0 and make the framework easier to implement.