This framework was created through public-private collaboration to provide a common language to address and manage cyber risk based on business needs without additional regulatory requirements for businesses.