A.NIST SP 800-37

B.NIST SP 800-39

C.NIST SP 800-137

D.NIST SP 800-30

A.OMB Circular A-133

B.OMB Circular A-136

C.OMB Circular A-130

D.OMB Circular A-123

A.Residual risk

B.Positive risk

C.Negative risk

D.Secondary risk

A.1. Coordinate Security for Interconnected Systems.
2. Apply Minimum Security Baselines.
3. Assess Risk
4. Develop Security Procedures
5. Document the Accreditation Decision
6. System Inventory Process.
7. Create System Authorization Documentation
8. Develop System Security Plan
9. Conduct Certification Testing
10. System Security Authorization Project Planning.

B.1. System Security Authorization Project Planning.
2. System Inventory Process.
3. Assess Sensitivity and Criticality
4. Develop System Security Plan
5. Create System Authorization Documentation
6. Document the Accreditation Decision
7. Assess Risk
8. Apply Minimum Security Baselines.
9. Develop Security Procedures
10. Conduct Certification Testing
11. Coordinate Security for Interconnected Systems.
12. Plan for Remediation

C.1. System Security Authorization Project Planning.
2. System Inventory Process.
3. Assess Sensitivity and Criticality
4. Develop System Security Plan
5. Coordinate Security for Interconnected Systems.
6. Apply Minimum Security Baselines.
7. Assess Risk
8. Develop Security Procedures
9. Conduct Certification Testing
10. Plan for Remediation
11. Create System Authorization Documentation
12. Document the Accreditation Decision

D.1. Conduct Certification Testing
2. Plan for Remediation
3. Create System Authorization Documentation
4. Document the Accreditation Decision
5. System Inventory Process.
6. Coordinate Security for Interconnected Systems.
7. Assess Risk
8. Develop System Security Plan
9. System Security Authorization Project Planning.
10. Apply Minimum Security Baselines.

A.Hybrid control

B.Logical control

C.Common control

D.System Specific control