A framework to evaluate and improve an organisation's cybersecurity maturity through a six-step process assessing assets, vulnerabilities, risk management, and remediation.

A process to identify, evaluate, prioritise, and remediate security vulnerabilities in systems and software to reduce risk exposure.