Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy In NIST Special Publication. Gaithersburg, MD: National Institute of Standards and Technology , 2018.