@misc{9216, author = {Ronald Ross}, title = {Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach}, year = {2014}, month = {2014-06-10}, publisher = {Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD}, doi = {https://doi.org/10.6028/NIST.SP.800-37r1}, language = {en}, }