@misc{242506,
  author = {Ronald Ross},
  title = {Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy},
  year = {2018},
  month = {2018-12-20},
  publisher = {Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD},
  doi = {https://doi.org/10.6028/NIST.SP.800-37r2},
  language = {en},
}