National Institute of Standards and Technology Special Publication 800-39, Managing March 2011 Information Security Risk, National Institute of Standards and Technology Special Publication 800-53 Rev. 4, Security 2013 and Privacy Controls for Federal Information Systems and Organizations, National Institute of Standards and Technology Special Publication 800-53A Rev. 4, Assessing Security and Privacy Controls in Federal Information System and Organizations, December 2014 National Institute of Standards and Technology Special Publication 800-64 Rev. 2, Security October 2008 Considerations in the System Development Life-Cycle, National Institute of Standards and Technology Special Publication 800-115, Technical September 2008 to Information Security Testing and Assessment, National Institute of Standards and Technology Special Publication 800-137, Information Security Continuous Monitoring (ISCM) for Federal Information Systems and September 2011 Organizations, National Institute of Standards and Technology Draft Special Publication 800-160, Systems May 2014 Security Engineering, Federal Information Processing Standards Publication 199, Standards for Security February 2004 Categorization of Federal Information and Information Systems, DoDI 5000.02, 7 January 2015 Operation of the Defense Acquisition System, DoDI 5134.16, Deputy Assistant Secretary of Defense for Systems Engineering (DASD(SE)), 19 August 2011 DoDI 8500.1, 14 March 2014 Cybersecurity, DoDI 8510.01. Risk Management Framework (RMF) for DoD Information Technology (IT), 12 March 2014 DoDI 8551.1, 28 May 2014 Ports, Protocols, and Services Management (PPSM), DoDD 8000.1, 10 February 2009 Management of Defense Information Enterprise, CJCSI 3170.01I, 23 January 2015 Joint Capabilities Integration and Development System, CJCSM 6510.01F, 9 Information Assurance (IA) and Computer Network Defense (CND), February 2011 1253, 27 Security Categorization and Control Selection for National Security Systems, March 2014 AFPD 17-1, 12 April 2016 Information Dominance Governance and Management, AFI 10-601, 6 November 2013 Operational Capability Requirements Development, AFI 16-1404, 29 May 2015 Air Information Security Program, AFI 17-101, Risk Management Framework (RMF) for Air Force Information Technology 30 November 2016 (IT), AFI 17-100, Air 16 September Force Information Technology (IT) Service Management, 2014 AFI 17-130, 31 August 2015 Air Force Cybersecurity Program Management,
National Institute of Standards and Technology Special Publication 800-39, Managing Information Security Risk, March 2011 National Institute of Standards and Technology Special Publication 800-53 Rev. 4, Security and Privacy Controls for Federal Information Systems and Organizations, 2013 National Institute of Standards and Technology Special Publication 800-53A Rev. 4, Assessing Security and Privacy Controls in Federal Information System and Organizations, December 2014 National Institute of Standards and Technology Special Publication 800-64 Rev. 2, Security Considerations in the System Development Life-Cycle, October 2008 National Institute of Standards and Technology Special Publication 800-115, Technical to Information Security Testing and Assessment, September 2008 National Institute of Standards and Technology Special Publication 800-137, Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations, September 2011 National Institute of Standards and Technology Draft Special Publication 800-160, Systems Security Engineering, May 2014 Federal Information Processing Standards Publication 199, Standards for Security Categorization of Federal Information and Information Systems, February 2004 DoDI 5000.02, Operation of the Defense Acquisition System, 7 January 2015 DoDI 5134.16, Deputy Assistant Secretary of Defense for Systems Engineering (DASD(SE)), 19 August 2011 DoDI 8500.1, Cybersecurity, 14 March 2014 DoDI 8510.01. Risk Management Framework (RMF) for DoD Information Technology (IT), 12 March 2014 DoDI 8551.1, Ports, Protocols, and Services Management (PPSM), 28 May 2014 DoDD 8000.1, Management of Defense Information Enterprise, 10 February 2009 CJCSI 3170.01I, Joint Capabilities Integration and Development System, 23 January 2015 CJCSM 6510.01F, Information Assurance (IA) and Computer Network Defense (CND), 9 February 2011 1253, Security Categorization and Control Selection for National Security Systems, 27 March 2014 AFPD 17-1, Information Dominance Governance and Management, 12 April 2016 AFI 10-601, Operational Capability Requirements Development, 6 November 2013 AFI 16-1404, Air Information Security Program, 29 May 2015 AFI 17-101, Risk Management Framework (RMF) for Air Force Information Technology (IT), 30 November 2016 AFI 17-100, Air Force Information Technology (IT) Service Management, 16 September 2014 AFI 17-130, Air Force Cybersecurity Program Management, 31 August 2015