The purpose of the Select Step is to identify, select, tailor, and document the security and privacy controls necessary to protect the system and the organization commensurate with the risk to organizational operations and assets, individuals, other organizations, and the Nation.
All links below point to PDF files for the Select Step.Security and Privacy: risk management
Laws and Regulations: E-Government Act, Federal Information Security Modernization Act
