NIST Cybersecurity Framework v1.1

The Framework describes a set of security outcomes to achieve and breaks those into three levels of increasing detail: Functions, Categories, and Subcategories. Further each Subcategory contains Informative References. Informative References are materials from other publications that can provide the implementation guidance to achieve those outcomes.