While a draft of the Cybersecurity Framework required by the Executive Order won???t be out until later this year, the National Institute of Standards and Technology (NIST) has been working hard in gathering input on what practices, procedures, tools and other guidance should be part of it.