Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy Publication Type: Report Authors: NIST Source: NIST Special Publication, National Institute of Standards and Technology , Number 800-37 Rev. 2, Gaithersburg, MD (2018)