TY - RPRT TI - Risk management framework for information systems and organizations: a system life cycle approach for security and privacy PY - 2018 PB - National Institute of Standards and Technology CY - Gaithersburg, MD SN - NIST SP 800-37r2 DO - 10.6028/NIST.SP.800-37r2 ER -