Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Projects Cyber Risk Analytics and Measurement

Cybersecurity Risk Analytics and Measurement CRA

Publications

The following NIST-authored publications are directly related to this project.

Series & Number Title Status Released
SP 800-55 Vol. 1 Measurement Guide for Information Security: Volume 1 — Identifying and Selecting Measures Draft 01/17/2024
SP 800-55 Vol. 2 Measurement Guide for Information Security: Volume 2 — Developing an Information Security Measurement Program Draft 01/17/2024
SP 800-216 Recommendations for Federal Vulnerability Disclosure Guidelines Final 05/24/2023
SP 800-55 Rev. 2 Performance Measurement Guide for Information Security Withdrawn 11/14/2022
IR 7358 Program Review for Information Security Management Assistance (PRISMA) Final 01/01/2007

Additional Pages

Terminology

Contacts

CRA team
cyberriskanalytics@nist.gov

Hung Trinh
hung.trinh@nist.gov

Katherine Schroeder
Katherine.Schroeder@nist.gov

Topics

Security and Privacy: risk management, security measurement

Created September 07, 2018, Updated June 14, 2024