NIST Risk Management Framework

A disciplined and structured process that integrates information security and risk management activities into the system development life cycle.