News

SP 800-39 also provides guidance for managing risk associated with the development, implementation, operation, and use of information systems.