A representation of the outcomes that a particular system or organization has selected from the Framework Categories and Subcategories.
Sources:
NIST SP 800-37 Rev. 2
from
NIST Cybersecurity Framework Version 1.1