خطوة Prepare من إطار إدارة المخاطر NIST RMF (SP 800-37): النظام والمهام التي يدعمها، والأطراف المعنية وأدوار RMF، وحدود التفويض الأولية، وتحمّل المخاطر، والقرارات اللازمة قبل التصنيف.
المحتوى
1. النظام والمهام
2. أدوار RMF
3. حدود التفويض الأولية
4. تحمّل المخاطر والقيود
5. القرارات المطلوبة
ما تقدمونه
System name — The system to be authorized.
System description — Purpose, users, main components and interconnections.
Missions and business functions supported
Stakeholders
Authorizing Official (role) — The senior official who will accept the risk.
System owner (role)
Control assessor
— Who assesses the controls, independent where required.
Authorization boundary — The components, interconnections and locations inside it, and what stays out.
Constraints and risk tolerance — Legal, contractual, budget, tolerance: one per entry.
Roles and owners — Who is responsible for which area. Owners in the result are taken from here; where no role covers an area, the owner is left for you to fill.
Additional context — Anything the service should take into account.
Title — As it will appear on the result.
Author — Shown as the author of the deliverable; never filled in by the AI.
Sections, in order — The template's sections are proposed, one per line in order: drag to reorder, rename, remove or add.
