Risk Management Framework

Introduction

Laws, Regulation and Guidance

The Joint Task Force Transformation Initiative

Key Positions and Roles

Transition from the Four-Phase Certification and Accreditation Cycle

The RMF

Integrated Organization-Wide Risk Management

Lab Organization

Phase 1: System Categorization

Phase 2: Control Selection

Phase 3: Control Implementation

Phase 4: Control Assessment

Phase 5: System Authorization

Phase 6: Continuous Monitoring

Use of RMF in Other Environments

Future Planned Changes

Use with Other Compliance Requirements

Appendices