Reference no: EM131689623

Guide for Applying the Risk Management Framework to Federal Information Systems National Institute of Standards Technology at https://csrc.nist.gov/publications and research and comment on the following questions:

1. What are the steps with in the Risk management frame work, explain each step and give an example of how they apply to a system such as a firewall, server, or computer?

2. What is a system security risk management approach? Give a specific example as it applies to a technology system, such as a firewall.

3. What does it mean to implement controls based on the system and not an enterprise base risk management approach? Give specific examples?

4. What is FISMA? Who does it apply to?

5. What is FIPS? Who does it apply to?

6. What are 6 benefits to SP 800-37. Give examples to each.

Please provide the answer in elaborate way like 4-5 paragraphs and it should be scholarly references and in-text ciations and therefore make sure you must avoid palgiarism.