The NIST Cybersecurity Framework (CSF) provides voluntary guidance for managing cybersecurity risk.
The functions:
Identify. Know your assets and risks.
Protect. Implement safeguards.
Detect. Discover security events.
Respond. Act on detected events.
Recover. Restore capabilities.
Implementation tiers (-) describe maturity from Partial to Adaptive.
Profiles align the framework to your business requirements and risk tolerance.