Hikvision achieves NIST CSF 2.0 certification

Hikvision has successfully attained certification under the NIST Cybersecurity Framework (CSF) 2.0. This recognition, following a thorough audit by the British Standards Institution (BSI), places Hikvision among the first global entities to meet the framework's standards.

This achievement underscores the company's alignment with internationally recognised cybersecurity governance, risk management, and compliance practices.

Understanding NIST CSF 2.0

The NIST Cybersecurity Framework (CSF) is a set of voluntary guidelines formulated by the National Institute of Standards and Technology (NIST). It assists organisations of different scales in managing and mitigating cybersecurity risks. The framework is structured around three main components: the Core, Organisational Profiles, and Tiers.

The framework is structured around three main components: the Core, Organisational Profiles, and Tiers

The CSF Core comprises six essential functions: Govern (GV), Identify (ID), Protect (PR), Detect (DE), Respond (RS), and Recover (RC). These functions provide a strategic lifecycle to help organisations effectively manage cybersecurity risks.

One of the notable advancements in version 2.0 compared with its predecessor, version 1.1, is the enhanced focus on the "Govern" function, highlighting the strategic importance of cybersecurity governance. It also integrates supply chain and third-party risk management, stressing the need for comprehensive supply chain security. Additionally, version 2.0 expands alignment with other NIST resources, facilitating global applicability for managing cybersecurity risks.

Developing a Comprehensive Cybersecurity Framework

Hikvision has built a comprehensive cybersecurity system in line with all six core CSF functions. By embedding security into its corporate strategy, risk management, compliance programmes, and supply chain operations, Hikvision ensures that security practices are deeply integrated into all business processes.

The NIST CSF 2.0 certification validates that Hikvision’s cybersecurity governance is in accordance with international best practices. The company's layered security capabilities support partners and clients globally, promoting secure and compliant operations and solidifying its role as a trusted technology partner worldwide.

Commitment to Cybersecurity and Privacy

Over the years, Hikvision has amassed a significant array of globally recognised certifications

Hikvision remains steadfast in its dedication to advancing cybersecurity and privacy protection across its operations. By adhering to internationally recognised standards and regulatory requirements, the company regularly assesses its capabilities and pursues continuous improvement to enhance its security posture.

Over the years, Hikvision has amassed a significant array of globally recognised certifications, including ISO/IEC 27001:2022, ISO/IEC 27701:2019, ISO/IEC 27017, ISO/IEC 29151, and ISO 38505-1:2017, in addition to the recent NIST CSF 2.0 certification.

Advancing Cybersecurity Initiatives

Cybersecurity forms the foundation of trust, and Hikvision’s achievement of over 25 authoritative security and compliance certifications worldwide reflects its commitment to data protection and building digital trust. Hikvision plans to continue enhancing its cybersecurity programmes and will share best practices across the industry, contributing to a safer digital environment.