Download Informative Reference Resource

https://csrc.nist.rip/CSRC/media/Projects/olir/documents/submissions/SP800-37-Rev-2-to-Framework-v1.1.xlsx

Status:
Final

Informative Reference Version:
1.0.0

Focal Document Version:
1.1

Summary:
This publication describes the Risk Management Framework (RMF) and provides guidelines for applying the RMF to information systems and organizations. The RMF provides a disciplined, structured, and flexible process for managing security and privacy risk that includes information security categorization; control selection, implementation, and assessment; system and common control authorizations; and continuous monitoring.

Target Audience:
This publication serves individuals associated with the design, development, implementation, assessment, operation, maintenance, and disposition of information systems.

Comprehensive:
Yes

Comments:
N/A

Point of Contact:
olir@nist.gov

Category of Submitter:
Public Sector

Dependencies/Requirements:
N/A

Citations:
N/A