Cybersecurity frameworks are lists of standard controls used to identify risks to a business process or technology (end point, server, network). Frameworks typically apply to a type of organization (education, finance, government) or type of data (personally identifiable information, sensitive data, payment information).