Category:NIST SP 800-37r1

Table of Contents

• Front Matter
• Table of Contents
• CHAPTER ONE INTRODUCTION

• 1.1 BACKGROUND
• 1.2 PURPOSE AND APPLICABILITY
• 1.3 TARGET AUDIENCE
• 1.4 ORGANIZATION OF THIS SPECIAL PUBLICATION

• CHAPTER TWO THE FUNDAMENTALS

• 2.1 INTEGRATED ORGANIZATION-WIDE RISK MANAGEMENT
• 2.2 SYSTEM DEVELOPMENT LIFE CYCLE
• 2.3 INFORMATION SYSTEM BOUNDARIES
• 2.4 SECURITY CONTROL ALLOCATION

• CHAPTER THREE THE PROCESS

• 3.1 RMF STEP 1 – CATEGORIZE INFORMATION SYSTEM
• 3.2 RMF STEP 2 – SELECT SECURITY CONTROLS
• 3.3 RMF STEP 3 – IMPLEMENT SECURITY CONTROLS
• 3.4 RMF STEP 4 – ASSESS SECURITY CONTROLS
• 3.5 RMF STEP 5 – AUTHORIZE INFORMATION SYSTEM
• 3.6 RMF STEP 6 – MONITOR SECURITY CONTROLS

• APPENDIX A REFERENCES
• APPENDIX B GLOSSARY
• APPENDIX C ACRONYMS
• APPENDIX D ROLES AND RESPONSIBILITIES
• APPENDIX E SUMMARY OF RMF TASKS
• APPENDIX F SECURITY AUTHORIZATION
• APPENDIX G CONTINUOUS MONITORING
• APPENDIX H OPERATIONAL SCENARIOS
• APPENDIX I SECURITY CONTROLS IN EXTERNAL ENVIRONMENTS

-- THE NATIONAL STRATEGY FOR CYBERSPACE OPERATIONS

OFFICE OF THE CHAIRMAN, JOINT CHIEFS OF STAFF, U.S. DEPARTMENT OF DEFENSE

Source

• NIST SP 800-37 Rev. 1 Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach (PDF)