The framework applies five key functions - identify, protect, detect, respond and recover, to assess an organization’s information security maturity for the purpose of establishing an information security management cycle through comprehensive cybersecurity planning and executing regular improvement plans.