You just read:

Center for Internet Security's Response to the National Institute of Standards and Technology's Request for Information