This bulletin summarizes the information presented in NIST Special Publication (SP) 800-30 Rev.1, Guide to Conducting Risk Assessments. This publication was developed by the Joint Task Force Transformation Initiative, a joint partnership among the Department of Defense, the Intelligence Community, NIST, and the Committee on National Security Systems. SP 800-30 Rev.1 discusses the risk management process and how risk assessments are an integral part of that process. The publication provides guidance for Federal agencies in conducting risk assessments of organizations and their information systems for each step in the risk assessment process. The bulletin covers the overall risk management approach, and how risk assessments fit into a comprehensive risk management process. References are provided to additional sources of information on risk assessment and management.
This bulletin summarizes the information presented in NIST Special Publication (SP) 800-30 Rev.1, Guide to Conducting Risk Assessments. This publication was developed by the Joint Task Force Transformation Initiative, a joint partnership among the Department of Defense, the Intelligence Community,...
See full abstract
This bulletin summarizes the information presented in NIST Special Publication (SP) 800-30 Rev.1, Guide to Conducting Risk Assessments. This publication was developed by the Joint Task Force Transformation Initiative, a joint partnership among the Department of Defense, the Intelligence Community, NIST, and the Committee on National Security Systems. SP 800-30 Rev.1 discusses the risk management process and how risk assessments are an integral part of that process. The publication provides guidance for Federal agencies in conducting risk assessments of organizations and their information systems for each step in the risk assessment process. The bulletin covers the overall risk management approach, and how risk assessments fit into a comprehensive risk management process. References are provided to additional sources of information on risk assessment and management.
Hide full abstract
Keywords
confidentiality; cyber security; Federal Information Security Management Act; FISMA; information security; information security risk; information systems; information system life cycle; Joint Task Force Transformation Initiative; NIST Special Publications; risk assessments; risk management; Risk Management Framework; security controls; security management; security requirements; security risks; threats; vulnerabilities
