The subdivision of a Function into groups of cybersecurity outcomes, closely tied to programmatic needs and particular activities.
Source(s):
NIST SP 800-37 Rev. 2