A part of an Organizational Profile that specifies the desired Core outcomes that an organization has selected and prioritized for achieving its cybersecurity risk management objectives.
Sources:
NIST Cybersecurity Framework 2.0