The NIST Framework addressess the following topics:

• Assess Management

• Business Environment

• Governance

• Risk Assessment

• Risk Management Strategy

• Supply Chain Risk Managent

• Identity Management, Authentication and Access Control

• Awareness and Training

• Data Security

• Information Protection Processes and Procedures

• Maintenance

• Protective Technology

• Anomalies and Events

• Security Continuous Monitoring

• Detection Processes

• Response Planning

• Communications

• Analysis

• Mitigation

• Improvements

• Recovery Planning