NIST SP 800-37 Rev. 1

The guidelines for establishing RMF. “Guide for applying the risk management framework to federal information systems: A security lifecycle approach.” Published in 2010. Originally only had 6 steps in the RMF lifecycle. Withdrawn in 2019 to be replaced by Rev. 2