Framework

The CKMS requirements specified in [NIST SP 800-130].

See NIST SP 800-152 under Framework (for CKMS) for more information. 

A layered structure indicating what kind of programs can or should be built and how they would interrelate. Some computer system frameworks also include actual programs, specify programming interfaces, or offer programming tools for using the frameworks. A framework may be for a set of functions within a system and how they interrelate; the layers of an operating system; the layers of an application subsystem; how communication should be standardized at some level of a network; and so forth. A framework is generally more comprehensive than a protocol and more prescriptive than a structure.

See NIST SP 800-95 from whatis.com, https://whatis.techtarget.com for more information. 

The Cybersecurity Framework developed for defining protection of critical infrastructure. It provides a common language for understanding, managing, and expressing cybersecurity risk both internally and externally. Includes activities to achieve specific cybersecurity outcomes, and references examples of guidance to achieve those outcomes.

See the following for more information:

NISTIR 8183.

NISTIR 8183 Rev. 1.

NISTIR 8183A Vol. 1.

NISTIR 8183A Vol. 2.

NISTIR 8183A Vol. 3.

A risk-based approach to reducing cybersecurity risk composed of three parts: the Framework Core, the Framework Profile, and the Framework Implementation Tiers. Also known as the “Cybersecurity Framework.”

See NIST Cybersecurity Framework Version 1.1 for more information.