April 16, 2018 Cybersecurity Framework Version 1.1 absolute. However, it is often more valuable to predict whether a cybersecurity risk may occur, and the impact it might have, using a leading measure. Organizations are encouraged to innovate and customize how they incorporate measurements into their application of the Framework with a full appreciation of their usefulness and limitations. This publication is available free of charge from: https://doi.org/10.6028/NIST.CSWP.04162018 21