This Recommendation defines Cyber Defence Centre as the entity that plays a central role in an organization to address cybersecurity risks. The three processes of build, management and evaluation that CDC should practically implement are described as a framework, and the services that the organization should have in order to implement more specific cybersecurity measures are also provided.