RMF Publicstions

ARKS Data has assembled the following collection of RMF-related government publications. Please note these are UNCLASSIFIED documents with no restrictions on usage or distribution.

LAWS AND EXECUTIVE BRANCH POLICES

Federal Information Security Management Act (FISMA) 

 OMB Circular A-130 (Managing Information as a Strategic Resource)

FEDERAL INFORMATION PROCESSING STANDARDS (FIPS) PUBLICATIONS

FIPS 199 (Security Categorization) 

FIPS 200 (Minimum Security Controls)

NIST SPECIAL PUBLICATIONS (SP)

SP 800-12 (An Introduction to Information Security) 

SP 800-18 (Security Plans) 

SP 800-30 (Risk Assessment) 

SP 800-34 (Contingency Planning) 

SP 800-37 Rev 2 (Risk Management Framework) 

SP 800-39 (Organizational Risk Management) 

SP 800-53 (Security Controls) 

SP 800-53A (Security Controls Assessment) 

SP 800-55 (Performance Measurement Guide for Information Security) 

SP 800-59 (National Security Systems) 

SP 800-60 (Security Categorization), Volume 1 

SP 800-60 (Security Categorization), Volume 2 

SP 800-61 (Incident Response Planning) 

SP 800-137 (Continuous Monitoring) 

IR 7298 (Glossary of Key Information Security Terms) 

Privacy Overlays

DISA CLOUD COMPUTING SUPPLEMENTAL GUIDANCE AND INFORMATION

DISA Cloud Computing Security Requirements Guide v1r3   |   Online Version

Best Practices Guide for DoD Cloud Mission Owners

Cloud Connection Process Guide v2

Cloud Related Baselines and eMASS Cloud Overlays Ver. 1, Rel 1

DoD Cloud Cyberspace Protection Guide

DoD Cyber Activities Performed for Cloud Service Memo

Secure Cloud Computing Architecture (SCCA) Functional Requirements (FR) v2-9