The Risk Management Framework is a United States federal government guideline, standard and process for risk management to help secure information systems developed by National Institute of Standards and Technology.

This API delivers controls and control information more accessibly by allowing users to get a list of all controls, all CCIs or specific controls and CCIs.