NIST Special Publication 800-37, Rev. 2

Citation
National Institute of Standards and Technology, (Draft) Risk Management Framework for Information Systems and Organizations A System Life Cycle Approach for Security and Privacy (NIST Special Publication 800-37, Rev. 2) (Sept. 2017) (full-text).