Organizations can directly benefit from using the NIST Cybersecurity Framework as either a template for creating a new cybersecurity program or as an overlay to existing operations to provide a unified structure for domestic and international cooperation to strengthen cybersecurity operations. The framework is intentionally stated as not a “one-size-fits-all” solution, but rather one that can be customized to meet different business needs based on their risk acceptance stance. Using the framework allows better communication of important cybersecurity topics to internal and external stakeholders by providing an opportunity to discuss security concerns and how they relate to the business’s overall mission and how they could impact the entire supply chain ecosystem. 

I would use this in my future workplace by examining their current structure with this framework approach to recognize differences and possibly suggest improvements to their current system, assuming they aren’t using it already. The functions listed in the framework, Identify, Protect, Detect, Respond, and Recover, outline a starting point towards managing cybersecurity threats. A unified structure allows better cooperation when a team is tackling an issue, and using the NIST Framework provides a common language among colleagues. Utilization of the framework also allows for continual improvement depending on the company’s agreed-upon tier.  In a security breach, the NIST framework would provide my team and me a structured way to analyze the risk, mitigate the damage, and return to normal business operations. By regularly inspecting the organization’s security posture with the core’s main continuous functions, I can help ensure that cybersecurity operations remain proactive instead of reactive, keeping the organization ahead and its operations protected.