Risk Management Framework for Information Systems and Organizations A System Life Cycle Approach for Security and Privacy
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-37r2.pdf
[protecting people by good design, solid security, efficient processes and trusted services]