Distinguish a cybersecurity standard from a cybersecurity framework, and explain how each can support an organizational security assessment.

### What a good answer covers - A **cybersecurity standard** states required security outcomes linked to enterprise objectives. - Standards help make the implementation of security strategy and policies consistent and measurable. - A **cybersecurity framework** supplies a common language and a set of standards for discussing security posture. - Frameworks can help define processes and procedures for assessing, monitoring, and mitigating cybersecurity risk. - Neither term should be confused with the particular solutions used to implement security. ### The concept A standard focuses on what security result must be achieved. A framework provides broader structure for understanding and organizing security work. In an assessment, a standard can help evaluate whether required outcomes are being met, while a framework can help organize communication and risk-management activities. The course material does not treat implementation solutions as part of the standard itself. ### Terms - **Security posture**: The state of an organization's security. - **Risk**: The possibility of an adverse event affecting organizational objectives. ### Remember Standards specify expected outcomes; frameworks organize shared understanding and security work.