[SP 800-37] “Risk Management Framework for Information Systems and Organizations A System Life Cycle Approach for Security and Privacy ” NIST Special Publication 800-37r2, 2018.
[SP 800-172] “Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171” NIST Special Publication 800-172, 2021.