Risk Management Framework (RMF)

  • Preparation
  • Categorization of Information Systems
  • Selection of Security and Privacy Controls
  • Implementation of Security and Privacy Controls
  • Assessment of Security and Privacy Controls
  • Authorization of Information Systems
  • Continuous Monitoring of Information Systems