A huge benefit to organizations who use this framework is that it doesn’t replace existing cybersecurity operations, instead it compliments. So, instead of paying a ton of money to get an entirely new system in place this framework can improve upon what’s already there. What’s nice however is that it can serve as the foundation for a new cybersecurity program.

Depending what I would be doing for work I guess would determine how I would use this framework. Considering how versatile it is whatever it is I would be doing I would expect it to align with the 5 high level functions “Identify, protect, detect, respond, and recover.”