Risk Management Framework (RMF) - Accreditation support, self-assessment, and Third Party, Security Control Assessments. Write policies, procedures, 

Tools: ACAS, Nessus, SCAP, STIGs