Differences

This shows you the differences between two versions of the page.

--- public:99_annexes:annex-b-terms-and-definitions:r:rmf [2026/09/12 17:42] – ↷ Page moved from private:99_annexes:annex-b-terms-and-definitions:r:rmf to public:99_annexes:annex-b-terms-and-definitions:r:rmf nick_dido
+++ public:99_annexes:annex-b-terms-and-definitions:r:rmf [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido
@@ Line 1: / Line 1: @@
 ====== Risk Management Framework (RMF) ======
-[[private:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]]
+[[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]]
 ===== Discussion =====
@@ Line 28: / Line 28: @@
   * Monitoring systems, controls, and risks
-Within Crucible documentation, the RMF provides the process context for generating, organizing, preserving, and presenting compliance information and supporting [[private:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]].
+Within Crucible documentation, the RMF provides the process context for generating, organizing, preserving, and presenting compliance information and supporting [[public:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]].
-Crucible does not perform the management responsibilities assigned to system owners, control assessors, risk executives, or [[private:99_annexes:annex-b-terms-and-definitions:a:authorizing_authority|Authorizing Authorities]]. Crucible provides artifacts and evidence that those actors use when performing RMF activities.
+Crucible does not perform the management responsibilities assigned to system owners, control assessors, risk executives, or [[public:99_annexes:annex-b-terms-and-definitions:a:authorizing_authority|Authorizing Authorities]]. Crucible provides artifacts and evidence that those actors use when performing RMF activities.
 ===== Definition =====
@@ Line 46: / Line 46: @@
 The RMF addresses more than authorization. It includes activities that prepare an organization to manage risk, categorize systems and information, select and implement controls, assess controls, authorize system operation, and monitor the resulting security and privacy posture.
-An [[private:99_annexes:annex-b-terms-and-definitions:a:ato|Authorization to Operate (ATO)]] represents one possible authorization decision produced during the Authorize activity of the RMF.
+An [[public:99_annexes:annex-b-terms-and-definitions:a:ato|Authorization to Operate (ATO)]] represents one possible authorization decision produced during the Authorize activity of the RMF.
 Evidence generated by Crucible can support the Implement, Assess, Authorize, and Monitor activities without transferring responsibility for those activities to Crucible.