Please follow https://csrc.nist.gov/Projects/risk-management/faqs.

Please follow https://csrc.nist.gov/Projects/risk-management/faqs.