Risk Management Framework RMF

If you are a security control accessor or an information security auditor or any other role that utilizes the NIST series compliance framework you will benefit by having all the reference guides to support the Authorization & Assessment Process in your pocket.


The Risk Management Framework (RMF) Mobile application provides information security practitioners a quick guide to support security compliance efforts within the Federal government and private organizations. The RMF application includes information that helps to manage security risk and strengthen the risk management process. The RMF app walks the user through the RMF six step processes:
1. Categorization of information systems
2. Selection of security controls
3. Implementation of security controls
4. Assessment of security controls
5. Authorization of information systems
6. Monitoring of security controls


This app is set up to not only guide you through the RMF process but you can search and favorite NIST Security policies associated with the six steps. Users can create shortcuts to the tasks involved in the A&A process and have a handy guide of the roles that are the responsible entity for completion.


The RMF mobile application is dynamic. It can support changes that emerge from the National Institute of Standards of Technology (NIST)’s Special Publications and other industry security resources. The mobile app is ideal for assessment and authorization (A&A) efforts and supporting continuous monitoring activities.

更新履歴
Changelog: Includes missing task steps from 800-37 and minor PDF updates (based on NIST policy retirement announcements)

Please leave a review/feedback for our team. We are looking forward to updating the app based on the releases of NIST 800-53 rev.5 and NIST 800-37 rev.2