RMF in Federal Departments and Agencies

For several years now, most federal “civil” departments and agencies have been utilizing NIST methodology for Certification and Accreditation of their information systems. RMF is being implemented in these organizations by adoption of the most recent revisions to the key NIST publications:

• NIST SP 800-37 (Rev. 1) – RMF process
• NIST SP 800-53 (Rev. 3) – Security controls
• NIST SP 800-53A (Rev. 1) – Assessment methods

Federal departments and agencies also utilize NIST publications for guidance on development of Security Plans (NIST SP 800-18), Risk Assessments (NIST SP 800-30), Contingency Plans (NIST SP 800-34), etc.

RMF Resource Center provides consulting and training services to support these organizations as they work towards full implementation of RMF.

Federal “Civil” Departments:

• Department of Agriculture
• Department of Commerce
• Department of Education
• Department of Energy
• Department of Health and Human Services
• Department of Homeland Security
• Department of Housing and Urban Development
• Department of the Interior
• Department of Justice
• Department of State
• Department of Transportation
• Department of the Treasury
• Department of Veterans Affairs

Independent Agencies (partial list):

• Administrative Conference of the United States
• Advisory Council on Historic Preservation
• African Development Foundation
• Amtrak (National Railroad Passenger Corporation)
• Commission on Civil Rights
• Commodity Futures Trading Commission
• Consumer Product Safety Commission
• Corporation for National and Community Service
• Corporation for Public Broadcasting
• Public Broadcasting Service
• Court Services and Offender Supervision Agency
• Defense Nuclear Facilities Safety Board
• Election Assistance Commission
• Environmental Protection Agency
• Equal Employment Opportunity Commission
• Export-Import Bank of the United States
• Farm Credit Administration
• Federal Communications Commission
• Federal Deposit Insurance Corporation
• Federal Election Commission
• Federal Housing Finance Board
• Federal Labor Relations Authority
• Federal Maritime Commission
• Federal Mediation and Conciliation Service
• Federal Mine Safety and Health Review Commission
• Federal Reserve System
• Federal Retirement Thrift Investment Board
• Federal Trade Commission (FTC)
• General Services Administration
• In-Q-Tel
• Institute of Museum and Library Services
• Inter-American Foundation
• International Broadcasting Bureau
• Merit Systems Protection Board
• National Aeronautics and Space Administration
• National Archives and Records Administration
• Office of the Federal Register
• National Capital Planning Commission
• National Council on Disability
• National Credit Union Administration
• Central Liquidity Facility
• National Endowment for the Arts
• National Endowment for the Humanities
• National Labor Relations Board
• National Mediation Board
• National Science Foundation
• National Transportation Safety Board
• Nuclear Regulatory Commission
• Occupational Safety and Health Review Commission
• Office of Compliance
• Office of Government Ethics
• Office of Personnel Management
• Office of Special Counsel
• Overseas Private Investment Corporation
• Panama Canal Commission
• Peace Corps
• Pension Benefit Guaranty Corporation
• Postal Regulatory Commission
• Railroad Retirement Board
• Securities and Exchange Commission
• Securities Investor Protection Corporation
• Selective Service System
• Small Business Administration
• Social Security Administration
• Tennessee Valley Authority
• U.S. Trade and Development Agency
• United States Agency for International Development
• United States International Trade Commission
• United States Postal Service
• United States Sentencing Commission
• Universal Service Administrative Company