In using the NIST risk management framework, how are inherent risk assessment biases avoided?

Many program managers downplay risk, since it's viewed as "calling their baby ugly". Could this mindset diminish the value of the RMF approach?

02 May 2014 1,972 1 View