In my last blog I outlined the first of the National Institute of Standards and Technology (NIST) framework functions: Identify, which is described by NIST as follows – “Develop the organizational understanding to manage cybersecurity risk to systems, assets, data, and capabilities.”