April 16, 2018 2.4 Cybersecurity Framework Version 1.1 Coordi nation of F ramework Implementation Figure 2 describes a common flow of information and decisions at the following levels within an organization:    Executive Business/Process Implementation/Operations The executive level communicates the mission priorities, available resources, and overall risk tolerance to the business/process level. The business/process level uses the information as inputs into the risk management process, and then collaborates with the implementation/operations level to communicate business needs and create a Profile. The implementation/operations level communicates the Profile implementation progress to the business/process level. The business/process level uses this information to perform an impact assessment. Business/process level management reports the outcomes of that impact assessment to the executive level to inform the organization’s overall risk management process and to the implementation/operations level for awareness of business impact. Figure 2: Notional Information and Decision Flows within an Organization This publication is available free of charge from: https://doi.org/10.6028/NIST.CSWP.04162018 12