Overview
Cye Exposure Management Platform supports multiple cybersecurity frameworks, but only one is designated as the primary framework. This article explains how the primary framework is used, how it affects scoring across the Cye Exposure Management Platform, and how to switch between frameworks for different maturity workflows.
What Is the Primary Framework?
The primary framework is the one the Cye platform uses for all platform-wide maturity-related calculations, including:
Exposure Metrics
Mitigation plans
Findings
Assets
Any scoring or data visualizations outside the maturity assessment screen rely exclusively on the primary framework.
Working with Multiple Frameworks
The Cye platform supports multiple concurrent frameworks — typically NIST CSF 1.1 and NIST CSF 2.0 — but only the primary framework is used outside the maturity screen.
Key things to know:
Data entered in each framework is independent and saved separately
The non-primary framework can still be used for rating and planning, but its scores won't appear in platform-wide metrics
This is especially useful during migration from CSF 1.1 to 2.0, enabling CSF 2.0 data population without losing 1.1 data
How to Set the Primary Framework
Only Cye platform administrators can set or change the primary framework:
In the left navigation bar, go to Settings > Maturity
Choose the desired framework as the Primary Framework
Wrap-up / Next Steps
Choosing your primary framework ensures consistent data usage across the Cye platform. If you're transitioning to NIST CSF 2.0, consider setting it as primary only after assessment confidence is established — or use both side-by-side until you're ready.