This framework helps promote the protection and resilience of critical infrastructure at multiple levels, consisting of controls designed to identify, protect, detect, respond to and recover from a spectrum of threats.