The first two, identify and protect, cover proactive cybersecurity measures. It’s via the identify function that you will develop an "organizational understanding to managing cybersecurity risk ...