The National Institute for Standards and Technology's Risk Management Framework is a United States federal government guideline, standard and process for risk management to help secure information systems developed by National Institute of Standards and Technology. Wikipedia