https://csrc.nist.gov/projects/risk-management/about-rmf
NIST Risk Management Framework | CSRC
Nov 30, 2016 ... A Comprehensive, Flexible, Risk-Based Approach. The Risk Management Framework (RMF) provides a process that integrates security, privacy, and ...