Paso Prepare del NIST Risk Management Framework (SP 800-37): el sistema y las misiones que respalda, las partes interesadas y las funciones RMF, el límite de autorización inicial, la tolerancia al riesgo y las decisiones necesarias antes de la categorización.
Contenido
1. Sistema y misiones
2. Funciones RMF
3. Límite de autorización inicial
4. Tolerancia al riesgo y restricciones
5. Decisiones necesarias
Lo que usted aporta
System name — The system to be authorized.
System description — Purpose, users, main components and interconnections.
Missions and business functions supported
Stakeholders
Authorizing Official (role) — The senior official who will accept the risk.
System owner (role)
Control assessor
— Who assesses the controls, independent where required.
Authorization boundary — The components, interconnections and locations inside it, and what stays out.
Constraints and risk tolerance — Legal, contractual, budget, tolerance: one per entry.
Roles and owners — Who is responsible for which area. Owners in the result are taken from here; where no role covers an area, the owner is left for you to fill.
Additional context — Anything the service should take into account.
Title — As it will appear on the result.
Author — Shown as the author of the deliverable; never filled in by the AI.
Sections, in order — The template's sections are proposed, one per line in order: drag to reorder, rename, remove or add.
