Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

ITL Bulletin

Putting First Things First – A Model Process for Criticality Analysis

Date Published: June 2018


Celia Paulsen (NIST), Larry Feldman (G2), Gregory Witte (G2)



Baseline criticality; criticality; criticality analysis; information security; prioritizing components; privacy
Control Families

Incident Response; Maintenance; Planning; Program Management; Risk Assessment; System and Services Acquisition; System and Information Integrity


Download (pdf)

Supplemental Material:
None available

Related NIST Publications:
IR 8179

Document History:
06/26/18: ITL Bulletin (Final)