NIST Special Publication 800-37 (rev 1): Guide for Applying the Risk Management Framework to Federal Information Systems

This publication provides guidelines for applying the Risk Management Framework (RMF) to federal information systems. The six-step RMF includes security categorization, security control selection, security control implementation, security control assessment, information system authorization, and security control monitoring.