Over 10 years ago, in a move to improve the resilience of the U.S.’ critical infrastructure to cyberattacks, then-President Barack Obama tasked the National Institute for Standards and Technology (NIST) with creating a cybersecurity framework by working with the private sector to identify industry best practices. 

Since then, that framework was only updated once, in 2018, in what was then referred to as the version 1.1.