Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST IR 8062

An Introduction to Privacy Engineering and Risk Management in Federal Systems

Date Published: January 2017


Sean Brooks (NIST), Michael Garcia (NIST), Naomi Lefkovitz (NIST), Suzanne Lightman (NIST), Ellen Nadeau (NIST)



computer security; cybersecurity; information security; privacy; risk management; systems engineering
Control Families

Risk Assessment


Download URL

Supplemental Material:
"Making Privacy Concrete (three words not usually found together)" (blog post)

Related NIST Publications:
ITL Bulletin

Document History:
05/28/15: IR 8062 (Draft)
01/04/17: IR 8062 (Final)


Security and Privacy

privacy, risk management

Laws and Regulations

OMB Circular A-130