Category:GIC-NISTSP80037r1FPD

Table of Contents

• FRONT MATTER (Discussion)
• CHAPTER ONE INTRODUCTION (Discussion)
  • 1.1 BACKGROUND
  • 1.2 PURPOSE AND APPLICABILITY
  • 1.3 TARGET AUDIENCE
  • 1.4 ORGANIZATION OF THIS SPECIAL PUBLICATION
• CHAPTER TWO THE FUNDAMENTALS (Discussion)
  • 2.1 INTEGRATED ENTERPRISE-WIDE RISK MANAGEMENT
  • 2.2 SYSTEM DEVELOPMENT LIFE CYCLE
  • 2.3 INFORMATION SYSTEM BOUNDARIES
  • 2.4 SECURITY CONTROL ALLOCATION
• CHAPTER THREE THE PROCESS (Discussion)
  • 3.1 RMF STEP 1 – CATEGORIZE INFORMATION SYSTEM
  • 3.2 RMF STEP 2 – SELECT SECURITY CONTROLS
  • 3.3 RMF STEP 3 – IMPLEMENT SECURITY CONTROLS
  • 3.4 RMF STEP 4 – ASSESS SECURITY CONTROLS
  • 3.5 RMF STEP 5 – AUTHORIZE INFORMATION SYSTEM
  • 3.6 RMF STEP 6 – MONITOR SECURITY CONTROLS
• APPENDIX A REFERENCES (Discussion)
• APPENDIX B GLOSSARY (Discussion)
• APPENDIX C ACRONYMS (Discussion)
• APPENDIX D ROLES AND RESPONSIBILITIES (Discussion)
• APPENDIX E SUMMARY OF RMF TASKS (Discussion)
• APPENDIX F SECURITY AUTHORIZATION (Discussion)
• APPENDIX G CONTINUOUS MONITORING (Discussion)
• APPENDIX H OPERATIONAL SCENARIOS (Discussion)
• APPENDIX I SECURITY CONTROLS IN EXTERNAL ENVIRONMENTS (Discussion)

-- THE NATIONAL STRATEGY FOR CYBERSPACE OPERATIONS

OFFICE OF THE CHAIRMAN, JOINT CHIEFS OF STAFF, U.S. DEPARTMENT OF DEFENSE

Footnotes

<references />

Sources

• NIST SP 800-37 Rev. 1 DRAFT Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach