Risk Management Framework has 6 steps, namely: Security Categorization Security Control Selection Security Control Implementation Security Control Assessment Authorization Continuous Monitoring