How do you eveluate the [[Computer security]] posture in a company? Frameworks such as NIST Cybersecurity Framework aims to make it possible. It is very comprehensive. Requires a lot of effort to materialize. [[ATC RE&CT Framework]] implements the [[Incident response lifecycle]].