RMF Related Documents

IASS is providing the following RMF-related documents and links for your information. These unclassified documents and websites, with no restrictions on access, useage or distribution.

Federal Information Processing Standards (FIPS)

FIPS 199 -- Security Categorization

FIPS 200 -- Minimum Security Controls

NIST Special Publications

SP 800-30 -- Risk Assessment

SP 800-37 -- Risk Management Framework

SP 800-53 Rev 4 -- Security Controls

SP 800-53A -- Security Controls Assessement

SP 800-60 Vol 1 -- Security Categorization

SP 800-60 Vol 2 -- Security Categorization

SP 800-137 -- Continuous Monitoring

Committee on National Security Systems (CNSS)

CNSSP 22 -- Risk Management Policy for NSS

CNSSI 1253 -- Security Categorization and Control Selection for NSS)

Department of Defense Instructions

CNSSI 1253 -- Security Categorization and Control Selection for NSS)

DoDI 8510.01 -- (DIACAP)

Federal Information Security Management Act (FISMA)

FISMA Implementation Project (NIST)

Federal Risk and Authorization Management Program (FedRAMP^SM)

Federal Cloud Strategy

Amazon Web Services

Security Whitepaper

Risk and Compliance Whitepaper

Disaster Recovery Whitepaper