As a compliance auditor, I can customize a framework by choosing which parts of the framework are included, modifying the framework, and extending the framework.

Required Resources:

• A framework in a machine-readable OSCAL format (e.g., NIST CSF, PCI DSS)

Goals:

1. A user can extend an existing framework to create a new framework.
2. A user can choose which parts of a given framework are included or excluded.
3. A user can modify existing parts of a given framework.

Acceptance Criteria:

1. A mockup is produced demonstrating implementation of a framework that uses framework extension and tailoring features described above (goals 1-3).