NISTIR 8179 (Draft)

Criticality Analysis Process Model: Prioritizing Systems and Components

Date Published: July 2017
Comments Due: August 18, 2017 (public comment period is CLOSED)
Email Questions to:


Celia Paulsen (NIST), Jon Boyens (NIST), Nadya Bartol (Boston Consulting Group), Kris Winkler (Boston Consulting Group)


NIST is seeking comments on NIST IR 8179, Criticality Analysis Process Model.  This publication describes a structured method of  prioritizing programs, systems, and components based on their importance to the goals of an organization and the impact that their inadequate operation or loss may present to those goals.



criticality analysis; critical components; critical programs; critical systems; information security; prioritizing components; prioritizing programs; prioritizing systems; prioritization; criticality; baseline criticality
Control Families

Incident Response; Maintenance; Program Management; Planning; System and Information Integrity; System and Services Acquisition; Risk Assessment