NIST Risk Management Framework (RMF)

The seven-step federal framework for managing security and privacy risk across information systems.