Schritt Prepare des NIST Risk Management Framework (SP 800-37): das System und die Aufgaben, die es unterstützt, die Beteiligten und RMF-Rollen, die anfängliche Autorisierungsgrenze, die Risikotoleranz und die vor der Kategorisierung nötigen Entscheidungen.
Inhalt
1. System und Aufgaben
2. RMF-Rollen
3. Anfängliche Autorisierungsgrenze
4. Risikotoleranz und Einschränkungen
5. Erforderliche Entscheidungen
Was Sie angeben
System name — The system to be authorized.
System description — Purpose, users, main components and interconnections.
Missions and business functions supported
Stakeholders
Authorizing Official (role) — The senior official who will accept the risk.
System owner (role)
Control assessor
— Who assesses the controls, independent where required.
Authorization boundary — The components, interconnections and locations inside it, and what stays out.
Constraints and risk tolerance — Legal, contractual, budget, tolerance: one per entry.
Roles and owners — Who is responsible for which area. Owners in the result are taken from here; where no role covers an area, the owner is left for you to fill.
Additional context — Anything the service should take into account.
Title — As it will appear on the result.
Author — Shown as the author of the deliverable; never filled in by the AI.
Sections, in order — The template's sections are proposed, one per line in order: drag to reorder, rename, remove or add.
