This section covers standards for process frameworks for exchanging security information. Neither of the two standards in this section directly define new data standards. Instead, they outline generic frameworks for interoperability and automation that leverage formats and protocols defined by other standards.