Guide for Applying the Risk Management Framework to Federal Information Systems NIST SP 800-37 Rev 1

by National Institute of Standards and Technology

The purpose of SP 800-37 Rev 1 is to provide guidelines for applying the Risk Management Framework to federal information systems to include conducting the activities of security categorization, security control selection and implementation, security control assessment, information system authorization, and security control monitoring.

104 pages, Paperback

Published December 29, 2013