NIST published a first public draft of a quick-start guide, SP 1353, on using AI models to analyse, plan and report on progress against its Cybersecurity Framework 2.0. It contains ready-made prompts, three worked scenarios and simulated files for a fictitious company. Comments are accepted until 15 October 2026, and the guidance is not final until then.
What changed
No NIST guidance existed on using AI models to produce Cybersecurity Framework artifacts.
What it unlocks
Using NIST-supplied example prompts and sample company files to draft and monitor Cybersecurity Framework 2.0 work with a general-purpose AI model.
- comment period closes 15 October 2026
- 3 example use cases
What you need to act on it
- draft status, subject to change after comments
- csrc.nist.gov2026-08-19