National Institute of Standards and Technology. (2014). Framework for Improving Critical Infrastructure Cybersecurity.

The three sections of this document (Framework Core, the Framework Profile, and the Framework Implementation Tiers) were developed to help organizations apply the principles and best practices of risk management to improving the security and resilience of critical infrastructure.