The draft outlines areas where further work needs to be done by next February. The final draft of the cybersecurity framework is slated to be issued in October. The discussion draft is a briefing document aimed at helping participants at a fourth workshop. NIST says the framework complements, but does not replace, an organization’s risk management process or cybersecurity program. The working draft also describes the framework’s key components, presents examples of how the framework can be used and addresses areas for improvement in cybersecurity standards and practices.”]
Source: https://www.careersinfosecurity.com/cybersecurity-framework-discussion-draft-issued-a-6028