https://www.idsalliance.org/security-outcome/applying-outcomes-to-nist-frameworks-and-publications/