In this assignment, students will review the risk management framework (RMF).

Provide an overview of the framework in a visual graphic format of the six steps in the process and provide a brief description of what happens in each.

Then, in 750-1,000 words, explain the following:

1. The number of controls/sub-controls found in the framework

2. The categories used in the risk-based approach

3. Why today's organizations should base security program strategy and decisions upon it

4. The differences between risk management and enterprise risk management

Make sure to reference academic or NIST official publications (most current year available via the Internet) or other relevant sources published within the last 5 years.

Prepare this assignment according to the guidelines found in the APA Style Guide, located in the Student Success Center.