Risk Management Framework (NIST RMF)
Risk Management Framework for Information Systems and Organizations - NIST Special Publication 800-37 Revision 2 | December 2018.
The RMF provides the essential tasks for control implementation, assessment, and monitoring, as well as system authorizations (for risk-based decision-making).
The NIST Risk Management Framework (RMF) Playbook addresses the following:
-
PREPARE — Organizational Level
-
PREPARE — System Level
-
CATEGORIZE
-
SELECT
-
IMPLEMENT
-
ASSESS
-
AUTHORIZE
Note: You must first install the GRC Playbook software before you can open and use the encrypted Playbooks.
All Playbooks are encrypted to protect the privacy and confidentiality of your data. The GRC Playbook software automatically generates and applies the password to programmatically unencrypt a Playbook and open it for use.
Save the downloaded Playbooks to a secure location on your system. Open your Playbooks from your secure location. GRC Playbook Limited does not have visibility into any of the data you enter into your downloaded Playbooks.
Based on Authoritative Sources
![NIST](https://grcplaybook.com/hs-fs/hubfs/NIST.png?width=403&height=146&name=NIST.png)