NIST RMF

The NIST Risk Management Framework, a structured process developed by the National Institute of Standards and Technology for managing information security risk in federal systems.