NIST Releases Discussion Draft of SP 800-37 – Risk Management Framework

The National Institute of Standards and Technology has released a discussion draft of Special Publication 800-37, Revision 2, "Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy." This update responds to the call to develop a next-generation Risk Management Framework for systems and organizations.