Risk Management Framework (RMF) is commonly used among the federal government, with the goals of improving information security, strengthening the risk management process, and encouraging reciprocity among federal agencies.