The Cybersecurity Risk Management Framework (CRMF) outlined in this document is designed to establish a robust, sustainable cybersecurity framework that reduces risks, strengthens the security posture of the Government of Alberta (GoA) and aligns with the Information Security Management Directives (ISMD).