On 1 October 2021, the consultation on the Assessing Security and Privacy Controls in Information Systems and Organisations draft was closed by the National Institute of Standards and Technology (NIST). In particular, the draft provides a framework …