{"id":9093,"date":"2024-05-16T18:41:53","date_gmt":"2024-05-16T18:41:53","guid":{"rendered":"https:\/\/sajinshivdas.com\/cybersecurity\/?page_id=9093"},"modified":"2024-08-15T10:57:48","modified_gmt":"2024-08-15T10:57:48","slug":"nist-risk-management-framework-rmf","status":"publish","type":"page","link":"https:\/\/sajinshivdas.com\/cybersecurity\/nist-risk-management-framework-rmf\/","title":{"rendered":"NIST Risk Management Framework (RMF)"},"content":{"rendered":"[vc_row type=”full_width_content” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” bg_color=”#5b5b5b” bg_image=”10185″ bg_position=”center center” background_image_loading=”default” bg_repeat=”no-repeat” scene_position=”center” top_padding=”12%” constrain_group_1=”yes” bottom_padding=”12%” left_padding_desktop=”10%” constrain_group_2=”yes” right_padding_desktop=”10%” top_padding_tablet=”25%” text_color=”light” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” enable_gradient=”true” color_overlay=”rgba(10,10,10,0.4)” color_overlay_2=”#0a0a0a” advanced_gradient_angle=”0″ overlay_strength=”0.95″ gradient_direction=”top_to_bottom” shape_divider_position=”bottom” bg_image_animation=”zoom-out-slow” parallax_bg=”true” parallax_bg_speed=”fast” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”0px” centered_text=”true” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” advanced_gradient_angle=”0″ gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” gradient_type=”default”][vc_row_inner column_margin=”none” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” zindex=”100″ overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][split_line_heading animation_type=”line-reveal-by-space” font_style=”h1″ line_reveal_by_space_text_effect=”letter-reveal-bottom” stagger_animation=”true” content_alignment=”default” mobile_content_alignment=”inherit” link_target=”_self” text_content=”NIST Risk Management Framework (RMF) Mindmap” font_size=”8vw”][\/split_line_heading][\/vc_column_inner][\/vc_row_inner][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” top_padding=”1%” constrain_group_1=”yes” bottom_padding=”1%” left_padding_desktop=”25%” constrain_group_2=”yes” right_padding_desktop=”25%” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” advanced_gradient_angle=”0″ gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” enable_animation=”true” animation=”fade-in-from-bottom” animation_easing=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” gradient_type=”default” delay=”300″][divider line_type=”Vertical Line” divider_color=”white” custom_height=”50″ custom_height_tablet=”25″][\/vc_column_inner][\/vc_row_inner][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” left_padding_desktop=”30%” constrain_group_2=”yes” right_padding_desktop=”30%” left_padding_tablet=”15%” constrain_group_4=”yes” right_padding_tablet=”15%” left_padding_phone=”8%” constrain_group_6=”yes” right_padding_phone=”8%” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][split_line_heading animation_type=”line-reveal-by-space” font_style=”p” line_reveal_by_space_text_effect=”default” stagger_animation=”true” content_alignment=”default” mobile_content_alignment=”inherit” link_target=”_self” text_content=”Risk Management Framework for Systems and Organizations based on NIST Special Publication (SP) 800-37, Revision 2″ font_size=”1.1vw” font_line_height=”1.6″ animation_delay=”500″ animation_offset=”100%” font_size_tablet=”18″ font_size_phone=”16″][\/split_line_heading][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row type=”full_width_background” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” bg_color=”#5e5e5e” scene_position=”center” top_padding=”5%” bottom_padding=”5%” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”features” row_name=”Features” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”padding-11-percent” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”left-right” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” centered_text=”true” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” enable_animation=”true” animation=”fade-in” animation_easing=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text css=”.vc_custom_1715878930655{margin-top: 50px !important;margin-bottom: 15px !important;}”]\n

7 Steps of Risk Mangement Framework\u00a0<\/span><\/h2>\n

RMF Steps, Purpose and Tasks.<\/span><\/h4>\n[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” enable_animation=”true” animation=”fade-in-from-bottom” animation_easing=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][nectar_image_with_hotspots image=”10185″ preview=”https:\/\/sajinshivdas.com\/cybersecurity\/wp-content\/uploads\/2024\/05\/Black-Doodle-Tools-for-Generating-Ideas-Mind-Map.png” color_1=”Accent-Color” hotspot_icon=”numerical” tooltip=”hover” tooltip_shadow=”large_depth” animation=”true”][nectar_hotspot left=”40.6868%” top=”14.9282%” position=”right”]\n
Purpose<\/h5>\n

Carry out essential activities at all three risk management levels to help prepare the organization to manage its security and privacy risks using the RMF<\/p>\n

Organization and Mission\/Business Process Level Tasks<\/h5>\n

P-1: Risk Management Roles|P-2: Risk Management Strategy|P-3: Risk Assessment – Organization|P-4: Organizationally-tailored Control Baselines and CSF Profiles (optional)|P-5: Common Control Identification|P-6: Impact Level Prioritization (optional)|P-7: Continuous Monitoring Strategy – Organization<\/p>\n

System Level Tasks (NEW)<\/h5>\n

P-8: Mission or Business Focus|P-9: System Stakeholders|P-10: Asset Identification|P-11: Authorization Boundary|P-12: Information Types|P-13: Information Life Cycle|P-14: Risk Assessment – System|P-15: Requirements Definition|P-16: Enterprise Architecture|P-17: Requirements Allocation|P-18: System Registration[\/nectar_hotspot][nectar_hotspot left=”68.7088%” top=”28.7802%” position=”bottom”]\n

Purpose<\/h5>\n

Inform organizational risk management processes and tasks by determining the adverse impact of the loss of confidentiality, integrity, and availability of organizational systems and information to the organization<\/p>\n

Tasks<\/h5>\n

C-1:System Description | C-2:Security Categorization | C-3:Security Categorization Review and Approval (NEW)[\/nectar_hotspot][nectar_hotspot left=”75.4381%” top=”53.9089%” position=”left”]\n

Purpose<\/h5>\n

Select, tailor, and document the controls necessary to protect the system and organization commensurate with risk to organizational operations and assets, individuals, and the Nation.<\/p>\n

Tasks<\/h5>\n

S-1:Control Selection | S-2: Control Tailoring (NEW) | S-3:Control Allocation (REVISED) | S-4:Document Planned Control Implementations (NEW) | S-5:Continuous Monitoring Strategy \u2013 System (REVISED) |S-6:Plan Review and Approval[\/nectar_hotspot][nectar_hotspot left=”68.7206%” top=”79.8249%” position=”top”]\n

Purpose<\/h5>\n

Acccomplish the activities necessary to translate the security and privacy controls identified in the system security plan into an effective implementation<\/p>\n

Tasks<\/h5>\n

I-1: Control Implementation | I-2: Update Control Implementation Information\u200b (REVISED)[\/nectar_hotspot][nectar_hotspot left=”12.3233%” top=”79.1382%” position=”right”]\n

Purpose<\/h5>\n

Determine if the controls selected for implementation are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security and privacy requirements for the system and organization<\/p>\n

Tasks<\/h5>\n

A-1:Assessor Selection (NEW) | A-2:Assessment Plan | A-3:Control Assessments (MOVED) | A-4:Assessment Reports | A-5:Remediation Actions | A-6:Plan of Action and Milestones (MOVED)[\/nectar_hotspot][nectar_hotspot left=”7.5749%” top=”53.6033%” position=”right”]\n

Purpose<\/h5>\n

Provide accountability by requiring a senior management official to determine if the security and privacy risk to organizational operations and assets, individuals, other organizations, or the Nation of operating a system or the use of common controls, is acceptable<\/p>\n

Tasks<\/h5>\n

R-1:Authorization Package | R-2:Risk Analysis and Determination (REVISED) | R-3:Risk Response (NEW) | R-4:Authorization Decision (NEW) | R-5:Authorization Reporting[\/nectar_hotspot][nectar_hotspot left=”11.5296%” top=”29.0859%” position=”bottom”]\n

Purpose<\/h5>\n

Maintain an ongoing situational awareness about the security and privacy posture of the system and the organization in support of risk management decisions<\/p>\n

Tasks<\/h5>\n

M-1:System and Environment Changes | M-2:Ongoing Assessments | M-3:Ongoing Risk Response | M-4:Authorization Package Updates | M-5:Security and Privacy Reporting | M-6:Ongoing Authorization | M-7:System Disposal[\/nectar_hotspot][\/nectar_image_with_hotspots][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row type=”full_width_background” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” bg_color=”#5e5e5e” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Related Mindmaps” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” bg_type=”image” parallax_style=”vcpb-default” bg_image_new=”id^9277|url^https:\/\/sajinshivdas.com\/cybersecurity\/wp-content\/uploads\/2024\/01\/www.sajinshivdas.comforensics-2.png|caption^null|alt^Types _of_forensics_01|title^Types _of_forensics|description^null” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text css=”.vc_custom_1715884588098{margin-bottom: 50px !important;}”]\n

NIST-Risk Manangement Framework Mindmap<\/span><\/h1>\n[\/vc_column_text][vc_raw_html]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[\/vc_raw_html][nectar_btn size=”large” open_new_tab=”true” button_style=”regular” button_color_2=”Accent-Color” color_override=”#ff1053″ icon_family=”none” text=”Full Screen” url=”https:\/\/sajinshivdas.com\/cybersecurity\/nist-rmf\/”]\r\n\t\t\t
\r\n\r\n\t\t\t
\r\n\r\n\t\t\t
\r\n\t\t\t\r\n\t\t\t\n\n\t<\/i>\n<\/span><\/span>\r\n\t\t\tDownload PDF Format<\/span>\r\n\r\n\t\t\t<\/span>\r\n\t\t\t<\/a>\r\n\t\t\tor<\/span>\r\n\t\t\t<\/span>\r\n\r\n\t\t\t<\/div>\r\n\r\n\t\t\t
\r\n\t\t\t\r\n\t\t\tDownload JPG Format<\/span>\r\n\r\n\t\t\t\n\n\t<\/i>\n<\/span><\/span>\r\n\t\t\t<\/span>\r\n\t\t\t<\/a><\/div>\r\n\t\t\t<\/div>\r\n\t\t\t<\/div>
<\/div>

Supporting NIST Publications (RMF steps)<\/h4><\/div>
<\/span><\/div><\/div>[vc_column_text]\ud83c\udf0dPrepare<\/b><\/span><\/p>\n