The Roadmap describes plans for advancing the Framework development process, discusses the National Institute of Standards and Technology’s (NIST’s) next steps with the Framework, and identifies key areas of development, alignment, and collaboration. This plan provides a description of anticipated future activities related to the Framework and offers stakeholders another opportunity to participate actively in the continuing Framework development process. While the plan is focused on the Cybersecurity Framework, the results of work described in this roadmap are expected to be useful to a much broader audience to improve cybersecurity risk management in much the same way that the Framework itself is useful to many sectors and organizations that are not strictly defined as part of the critical infrastructure.