United States Government Publishing Office publisher pbl distributor dst United States Commerce Department National Institute of Standards and Technology (NIST) author aut Government Organization Joint Task Force Transformation Initiative. author aut text government publication eng GOVPUB Executive Agency Publications executive 2019-03-26 Commerce Department 2018-12-19 monographic deposited born digital 183 digital object pages C 13. https://www.govinfo.gov/app/details/GOVPUB-C13-22bfb8e41eadaeda3bccbd32eef000de P0b002ee1a0186318 on1085510852 (OCoLC)1085510852 DGPO 2019-03-26 2026-07-06 GOVPUB-C13-22bfb8e41eadaeda3bccbd32eef000de machine generated eng fdlp C13 GOVPUB-C13-22bfb8e41eadaeda3bccbd32eef000de 22bfb8e41eadaeda3bccbd32eef000de GOVPUB NIST Special Publications NOTE: THE “DATE ISSUED” ABOVE MAY DEFAULT TO JANUARY 1ST OF A GIVEN YEAR. TO THE VIEW THE MOST ACCURATE DATE OF ISSUE, REVIEW THE TITLE PAGE OF THE PUBLICATION. This series includes proceedings of conferences sponsored by NIST, NIST annual reports, and other special publications appropriate to this grouping such as wall charts, pocket cards, and bibliographies. National Institute of Standards and Technology Commerce Department. National Institute of Standards and Technology. 2018 2018-12-19 https://www.govinfo.gov/app/details/GOVPUB-C13-22bfb8e41eadaeda3bccbd32eef000de https://www.govinfo.gov/content/pkg/GOVPUB-C13-22bfb8e41eadaeda3bccbd32eef000de/pdf/GOVPUB-C13-22bfb8e41eadaeda3bccbd32eef000de.pdf A System Life Cycle Approach for Security and Privacy Computer security--Standards--United States Cybersecurity Federal government--Computer networks--Security measures--United States Information storage and retrieval systems--United States--Security measures Security assessment report Joint Task Force Transformation Initiative. creator Joint Task Force Transformation Initiative. National Institute of Standards and Technology (U.S.) Information Technology Laboratory. mdu U.S. Dept. of Commerce, National Institute of Standards and Technology 2018-12-19. monographic 1 online resource (183 pages) : illustrations (color) text technical report eng This publication describes the Risk Management Framework (RMF) and provides guidelines for applying the RMF to information systems and organizations. The RMF provides a disciplined, structured, and flexible process for managing security and privacy risk that includes information security categorization; control selection, implementation, and assessment; system and common control authorizations; and continuous monitoring. The RMF includes activities to prepare organizations to execute the framework at appropriate risk management levels. The RMF also promotes near real-time risk management and ongoing information system and common control authorization through the implementation of continuous monitoring processes; provides senior leaders and executives with the necessary information to make efficient, cost-effective, risk management decisions about the systems supporting their missions and business functions; and incorporates security and privacy into the system development life cycle. Executing the RMF tasks links essential risk management processes at the system level to risk management processes at the organization level. In addition, it establishes responsibility and accountability for the controls implemented within an organization's information systems and inherited by those systems. Joint Task Force Transformation Initiative. December 2018. Title from PDF title page (viewed December 19, 2018). Includes bibliographical references. Mode of access: World Wide Web. Systems requirements: Adobe Acrobat PDF reader. Federal government--Computer networks--Security measures--United States Information storage and retrieval systems--United States--Security measures Computer security--Standards--United States Cybersecurity Security assessment report https://doi.org/10.6028/NIST.SP.800-37r2 a system life cycle approach for security and privacy a system life cycle approach for security and privacy