Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Introducing the RMF Small Enterprise Quick Start Guide

The NIST Risk Management Framework Small Enterprise Quick Start Guide is designed to help small, under-resourced entities understand the value and core components of the RMF.

Today, NIST released the Risk Management Framework (RMF) Small Enterprise Quick Start Guide. The new guide is designed to help small, under-resourced entities understand the RMF's value and core components and provides a starting point for designing and implementing an information security and privacy risk management program. 

Within the guide you’ll find:

  • An overview of the seven steps of the RMF process
  • Foundational tasks for each RMF step
  • Tips for getting started
  • Sample planning tables
  • Key terminology and definitions
  • Questions for organizations to consider
  • Related resources
Released July 24, 2024