The NIST Cybersecurity Framework (CSF) is a risk-based cybersecurity framework designed to help organizations identify, assess, and respond to cyber threats effectively. Developed by the National Institute of Standards and Technology (NIST), the CSF provides voluntary guidance to improve the cyber resilience of organizations across industries, particularly those managing critical infrastructure. Built on a flexible, tiered structure, the framework allows businesses to tailor their cybersecurity strategies to align with industry regulations, business goals, and evolving threats. The CSF consists of three key components: Functions, Categories, and Subcategories, where the Functions define essential cybersecurity activities, and the Categories and Subcategories provide actionable steps for implementation. By adopting the NIST Cybersecurity Framework, organizations can enhance their security posture, strengthen risk management, and protect against emerging cyber threats.