The new NIST 800-37 Rev 1 brings federal civilian agencies up to date with respect applying risk-based approaches to the systems development lifecycle. Prior to this release, the process was mostly a checkbox, proforma exercise (even though risk was a core component) that looked at a system from a point in time. Getting organizations to move to this different mindset, one that focuses on a constant dashboard view of the system could be extremely difficult for some and an exercise in continuous process improvement for others.”]