Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Measurements for Information Security


These are tools and utilities to assess the level of security risks and provide a mechanism to enhance automation for the cybersecurity information exchange.


Baldrige Cybersecurity Excellence Builder (BCEB)

A self-assessment tool to help organizations better understand the effectiveness of their cybersecurity risk management efforts and identity improvement opportunities in the context of their overall organizational performance.


Common Vulnerability Scoring System (CVSS)

An open framework for communicating the characteristics and severity of software vulnerabilities. CVSS is well suited as a standard measurement system for industries, organizations, and governments that need accurate and consistent vulnerability severity scores.



Created July 01, 2020, Updated January 29, 2024