NIST SP 800-37 Rev. 2

Revision 2 of the guidelines for establishing RMF. “Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy”. Added the prepare step.