A framework produced by the [[National Cyber Security Centre|NCSC]] for 'organisations responsible for vitally important services and activities'