Table of Contents

Note to Readers on the Update

Acknowledgements

Executive Summary

1.0 Framework Introduction

2.0 Framework Basics

3.0 How to Use the Framework

4.0 Self-Assessing Cybersecurity Risk with the Framework

Appendix A: Framework Core

Appendix B: Glossary

Appendix C: Acronyms

List of Figures

Figure 1: Framework Core Structure

Figure 2: Notional Information and Decision Flows within an Organization

Figure 3: Cyber Supply Chain Relationships

List of Tables

Table 1: Function and Category Unique Identifiers

Table 2: Framework Core

Table 3: Framework Glossary