Preparation
Identify, Protect, and Detect
Physical Network Layer
IDENTIFY (ID.AM, ID.BE, ID.GV, ID.RA, ID.RM, and ID.SC)
PROTECT (PR.AC, PR.AT, PR.DS, PR.IP, PR.MA, and PR.PT)
DETECT (DE.AE, DE.CM, and DE.DP)
Logical Network Layer
IDENTIFY (ID.AM, ID.BE, ID.GV, ID.RA, ID.RM, and ID.SC)
PROTECT (PR.AC, PR.AT, PR.DS, PR.IP, PR.MA, and PR.PT)
DETECT (DE.AE, DE.CM, and DE.DP)
Cyber-Persona Layer
IDENTIFY (ID.AM, ID.BE, ID.GV, ID.RA, ID.RM, and ID.SC)
PROTECT (PR.AC, PR.AT, PR.DS, PR.IP, PR.MA, and PR.PT)
DETECT (DE.AE, DE.CM, and DE.DP)
Respond and Recover
Physical Network Layer
RESPOND (RS.RP, RS.CO, RS.AN, RS.MI, and RS.IM)
RECOVER (RC.RP, RC.IM, and RC.CO)
Logical Network Layer
RESPOND (RS.RP, RS.CO, RS.AN, RS.MI, and RS.IM)
RECOVER (RC.RP, RC.IM, and RC.CO)
Cyber-Persona Layer
RESPOND (RS.RP, RS.CO, RS.AN, RS.MI, and RS.IM)
RECOVER (RC.RP, RC.IM, and RC.CO)