NIST Cyber security framework components

The NIST Cybersecurity Framework includes five components: the core, implementation tiers, profiles, framework categories, and subcategories. The core provides a set of cybersecurity activities, outcomes, and references that are common across sectors and industries. The implementation tiers describe the level of rigor and sophistication of an organization’s cybersecurity practices. Profiles are used to customize the framework to meet specific business needs, and the framework categories and subcategories provide a detailed breakdown of the cybersecurity functions and outcomes.