Developed by the National Institute of Standards and Technology, provides a risk-based approach to cybersecurity.