Rmf Risk Management Framework

1.24 (U) Risk Management Framework. DoDI 8510.01, Risk Management Framework (RMF) for DoD Information Technology, requirements are integrated throughout System Acquisition Lifecycle to control the cost and operational impact associated with known system vulnerabilities. In addition to Department of Defense Manual (DoDM) 5200.01 Volumes 1-4, DoD Information Security Program, NIST 800-60 Vol 1 and Vol 2, Guide to Mapping Type of Information and Information Systems to Security Categories, dated August 2008, and Federal Information Processing Standard (FIPS) 199, Standards for Security Categorization of Federal Information and Information Systems, were leveraged as guidance for classification of enclaves, networks, and information systems where