"Identify" helps develop an understanding of the organization to manage cybersecurity risks to systems, people, assets, data and capabilities (NIST).
"Protect" describes the appropriate safeguards to ensure the delivery of critical infrastructure services. It also supports the ability to limit or contain the impact of a potential cybersecurity incident (NIST).
“Detect” defines the appropriate activities to identify the occurrence of a cybersecurity event, and allow the timely discovery of said event (NIST).
“Respond” includes the appropriate activities to take action regarding a detected cybersecurity event. It also supports the ability to contain the impact of a potential cybersecurity event (NIST).
“Recover” identifies the appropriate activities to maintain resilience plans and restore any capacity or service that would have been impaired due to a cybersecurity incident; It also supports timely recovery to normal operations to reduce impact (NIST).
