Sp 800 37 rev

• What is NIST Special Publication 800-37 (Revision 2)?

  This update to NIST Special Publication 800-37 (Revision 2) responds to the call by the Defense Science Board, the Executive Order, and the OMB policy memorandum to develop the next- generation Risk Management Framework (RMF) for information systems, organizations, and individuals. There are seven major objectives for this update:

---

• What are errata changes in Special Publication 800-37?

  Errata This table contains changes that have been incorporated into Special Publication 800-37. Errata updates can include corrections, clarifications, or other minor changes in the publication that are either editorial or substantive in nature. DATE TYPE CHANGE PAGE

---

• What is the Special Publication 800-series?

  The Special Publication 800-series reports on ITL’s research, guidelines, and outreac h efforts in information systems security and privacy and its collaborative activities with industry, government, and academic organizations. Abstract

---

• What does SP 800-160 V1 mean?

  SP 800-160 v1 ] (Human Resource Management Process); [SP 800-181]; [NIST CSF] (Core [Identify Function]). RISK MANAGEMENT STRATEGY TASK P-2 Establish a risk management strategy for the organization that includes a determination of risk tolerance. Potential Inputs:

---

• [PDF File]NIST RMF Quick Start Guide

  https://info.5y1.org/sp-800-37-rev_1_c5efa1.html

  Joint Task Force (2010) Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach. (National Institute of Standards and Technology, Gaithersburg, MD), NIST Special Publication (SP) 800-37, Rev. 1 [withdrawn]. https://doi.org/10.6028/NIST.SP.800-37r1.

---

• [PDF File]Risk Management Framework for Information Systems and ...

  https://info.5y1.org/sp-800-37-rev_1_4ae59d.html

  NIST Special Publication 800 -37 Revision 2 Risk Management Framework for Information Systems and Organizations . A System Life Cycle Approach for Security and Privacy . JOINT TASK FORCE . This publication is available free of charge from: https://doi.org/10.6028/NIST.SP.800-37r2. This publication contains comprehensive updates to the

---

• [PDF File]and Organizations: A System Life Cycle Approach for Security ...

  https://info.5y1.org/sp-800-37-rev_1_0e1f77.html

  Publication Number: NIST Special Publication (SP) 800-37 Rev. 2 (Initial Public Draft) Title: Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy. Publication Date: May 9, 2018 • For the most current version of SP 800-37 Rev. 2, see https://csrc.nist.gov/publications/sp800 .

---

• [PDF File]NIST Special Publication 800-37 Risk Management Framework ...

  https://info.5y1.org/sp-800-37-rev_1_41327a.html

  The RMF provides a structured, yet flexible process for managing cybersecurity and privacy risk. that includes system categorization, control selection, implementation, assessment, authorization, and continuous monitoring.

---

• [PDF File]and Organizations: A System Life Cycle Approach for Security ...

  https://info.5y1.org/sp-800-37-rev_1_55e5a4.html

  Publication Number: NIST Special Publication (SP) 800-37 Rev. 2 . Title: Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy. Publication Date: 12/20/18 • Final Publication: https://doi.org/10.6028/NIST.SP.800-37r2 (which links to

---

• [PDF File]NIST RMF Quick Start Guide

  https://info.5y1.org/sp-800-37-rev_1_14469f.html

  Information needed to categorize a system is now being collected in the Prepare step of the Risk Management Framework. Prior to categorizing a system, the authorization boundary needs to be defined. This is now done by task P-11, Authorization Boundary, per SP 800-37, Revision 2 [SP 800-37r2].

---

Nearby & related entries:

• nist sp 800 66 rev 2
• nist 800 37 rev 4
• nist sp 800 37 rev 2
• nist 800 37 rev 2 pdf
• nist sp 800 37 pdf
• nist sp 800 37 r4
• nist 800 37 rev 2
• nist sp 800 53 rev 5