Select a set of controls (subcategory) for any category under any NIST CSF

function (identify, protect, detect, etc.) and determine the next likely iteration for

control strengthening to the next maturity level.