The National Institute of Standards and Technology (NIST) Cybersecurity Framework is intended to be a prioritized, flexible, repeatable, performance-based, and cost-effective approach-including measures and controls-that organizations can use to identify, assess, and mitigate cyber risks.