SP 800-37 Rev. 1, Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach

Summary

Replaced certification and accreditation with the six-step Risk Management Framework, stressing continuous monitoring and a common approach for civilian, defense, and intelligence agencies.

Read it on csrc.nist.gov

Topics

• Risk management and controls

Replaces

• SP 800-37, Guide for the Security Certification and Accreditation of Federal Information Systems (withdrawn)

Replaced by

• SP 800-37 Rev. 2, Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy (in effect)

What FedXchange has recorded

No changes recorded. The watch records a new document and any change in its status.