Risk Management Framework

Question 1

Step 1 - CATEGORIZE (SP 800-60)

Answer 1

Guide for Mapping Types of Information and Information Systems to Security Categories

Question 2

Step 2 - SELECT (SP 800-53)

Answer 2

Security and Privacy Controls for Information Systems and Organizations

Question 3

Step 3 - IMPLEMENT (SP 800-160)

Answer 3

Developing Cyber-Resilient Systems: A Systems Security Engineering Approach

Question 4

Step 4 - ASSESS (SP 800-53A)

Answer 4

Assessing Security and Privacy Controls in Information Systems and Organizations

Question 5

Step 5 - AUTHORIZE (SP 800-37)

Answer 5

Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy

Question 6

Step 6 - MONITOR (SP 800-137)

Answer 6

Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations