The NIST Cybersecurity Framework Core identifies underlying key Categories and Subcategories for each Function, and matches them with example Informative References such as existing standards, guidelines, and practices for each Subcategory. In the context of the security supplement document, it may be unnecessary to provide References for each sub-category as the subject at hand is most likely contained in a small set of publications.