Hmmmm....

NIST SP 800-37, Guide for the Security Certification and Accreditation of Federal Information Systems

 

NIST SP 800-37 Rev. 1, Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach