NIST'S Risk Management Framework (RMF)

Prepare

Activities that are necessary to manage security and privacy risk before a breach occurs

Categorize

Develop risk management processes and tasks

Select

choose, customize, and capture documentation of the controls that protect an organization

Implement

Implement security and privacy plans for the organization

Assess

Determine if established controls are implemented correctly

Authorize

being accountable for the security and privacy risks that may exist in an organization

Monitor

be aware of how systems are operating