TIM-6750

U.S. Department of Defense, Chief Information Officer Cybersecurity International Division. (2020, February 20). Cybersecurity Reference and Resource Guide.
This resource provides readily available and unclassified information about cybersecurity norms, best practices, security cooperation, policies and standards authored and adopted by the United States (U.S.) government, the U.S. Department of Defense (DoD), and recognized international institutes and workforce development training resources provided by government, industry, and academia. Focus reading on pages 4–18, and 41–46.

Zhao, J. (2020, May 13). FedRAMP compliance: A quick start guide.
This resource covers all key aspects of FedRAMP compliance and answers common questions from organizations new to FedRAMP.

Cybersecurity & Infrastructure Security Agency. (n.d.). Cybersecurity Framework.
This resource lists framework function areas and guidance that organizations can use for cyber resilience.

National Institute of Standards and Technology. (2018, December). Special publication 800-37 revision 2.
This resource describes the Risk Management Framework (RMF) and provides guidelines for applying the RMF to information systems and organizations. Focus reading on abstract, executive summary, and pages 8–18.

National Institute of Standards and Technology. (2020, December 10). Security and privacy controls for information systems and organizations.
This resource provides a catalog of security and privacy controls for information systems and organizations to protect organizational operations and assets, individuals, other organizations, and the nation from a diverse set of threats and risks.

Department Information Systems Agency. (2018, January 23). Risk management framework service product packages.
This resource provides mission partner authorizing officials (AO) a holistic view of their information systems risk posture.