Guide for Conducting Risk Assessments
National Institute of Standards and Technology
A step by step method for assessing risk, covering how to prepare an assessment, identify threat sources and events, determine likelihood and impact, and communicate results so decisions actually get made. Includes the full set of tables and rating scales the process depends on.
Loading the book...
Keep reading
-
Next in this topic
Risk Management Framework for Information Systems and OrganizationsThe seven step process for managing security and privacy risk across a system life cycle: prepare, categorize, select, implement, assess, authorize and monitor. It also shows how the framework connects to the Cybersecurity Framework and to supply chain risk management.
Verified PDF · Secure download - Cybersecurity: Our Digital Anchor
A policy oriented report that maps cyber security as a whole system, covering the threat landscape, digital sovereignty, standards and certification, and the research priorities that shape security governance. Useful for understanding how risk is managed at institutional scale rather than at the level of a single machine.
Verified PDF · Secure download - Guide to Integrating Forensic Techniques into Incident Response
A practical forensics manual built on a four phase process of collection, examination, analysis and reporting, applied to data files, operating systems, network traffic and applications. It also covers evidence integrity, tool selection and the policy questions that need answers before an incident starts.
Verified PDF · Secure download - Incident Response Recommendations for Cybersecurity Risk Management
A modern take on incident handling that treats response as part of continuous risk management rather than a separate playbook. It maps the work onto the six framework functions and lists the outcomes an organization should be able to demonstrate before, during and after an incident.
Verified PDF · Secure download - Guide for Cybersecurity Event Recovery
What to do after containment: planning recovery, defining processes and criteria, measuring how recovery is going, and running the exercises that make a plan hold up under pressure. Includes one worked scenario for ransomware and one for data integrity loss.
Verified PDF · Secure download
