Triple

Given a phrase, classify it is english named entity (e.g., persons, organizations, works of art) in Latin script, or not (e.g., literals, dates, URLs, verbose phrases). For disambiguation, the statement where the phrase occurs as object is also given. Please return a JSON object with `phrase` (string, the phrase being analyzed) and `is_ne` (boolean, indicating whether the phrase is a Named Entity).

Phrase: NIST Risk Management Framework | Statement: [Office of the Chief Information Security Officer of GSA, followsFramework, NIST Risk Management Framework]

Target entity: NIST Risk Management Framework
Context triple: [Office of the Chief Information Security Officer of GSA, followsFramework, NIST Risk Management Framework]

• A. NIST SP 800 series
  The NIST SP 800 series is a collection of special publications from the U.S. National Institute of Standards and Technology that provide guidelines, recommendations, and technical specifications for information security and risk management.
• B. Federal Risk and Authorization Management Program
  The Federal Risk and Authorization Management Program (FedRAMP) is a U.S. government-wide framework that standardizes security assessment, authorization, and continuous monitoring for cloud products and services used by federal agencies.
• C. ISO/IEC 27005
  ISO/IEC 27005 is an international standard that provides guidelines for information security risk management within an organization’s overall information security management system.
• D. National Security Risk Assessment process
  The National Security Risk Assessment process is a systematic government framework for identifying, evaluating, and prioritizing threats and hazards to a nation’s security to inform policy and preparedness.
• E. Federal Information Processing Standards
  Federal Information Processing Standards are publicly announced, U.S. government–wide standards that define requirements for information security, data formats, and interoperability in federal computer systems.
• F. None of above. chosen
• G. Unsure - the case is ambiguous/there is not enough information to decide.

Generate a one-sentence description of the target entity. 
You are given a context triple in the form (subject, predicate, object), where the object is the target entity. 
# Instructions
Use the triple to infer relevant information about the entity. Describe the entity based on what is most defining, well-known. 
Avoid repeating the information from the triple, unless really essential.
# Response Format
Return only the sentence: "Description: [one-sentence description of the target entity]"

Entity: NIST Risk Management Framework
Triple: [Office of the Chief Information Security Officer of GSA, followsFramework, NIST Risk Management Framework]

The NIST Risk Management Framework is a structured, standards-based process for integrating security, privacy, and risk management activities into the system development life cycle for U.S. federal information systems.

Target entity: NIST Risk Management Framework
Target entity description: The NIST Risk Management Framework is a structured, standards-based process for integrating security, privacy, and risk management activities into the system development life cycle for U.S. federal information systems.

• A. NIST SP 800 series chosen
  The NIST SP 800 series is a collection of special publications from the U.S. National Institute of Standards and Technology that provide guidelines, recommendations, and technical specifications for information security and risk management.
• B. Federal Risk and Authorization Management Program
  The Federal Risk and Authorization Management Program (FedRAMP) is a U.S. government-wide framework that standardizes security assessment, authorization, and continuous monitoring for cloud products and services used by federal agencies.
• C. ISO/IEC 27005
  ISO/IEC 27005 is an international standard that provides guidelines for information security risk management within an organization’s overall information security management system.
• D. National Security Risk Assessment process
  The National Security Risk Assessment process is a systematic government framework for identifying, evaluating, and prioritizing threats and hazards to a nation’s security to inform policy and preparedness.
• E. Federal Information Processing Standards
  Federal Information Processing Standards are publicly announced, U.S. government–wide standards that define requirements for information security, data formats, and interoperability in federal computer systems.
• F. None of above.