None
A cybersecurity or privacy capability an organization selects, acquires, and deploys itself; any capability that is not pre-market.
Source(s):
NISTIR 8228