Guide for Conducting Risk Assessments
Product Description
Guide for Conducting Risk Assessments
The purpose of Special Publication 800-30 is to provide guidance for conducting risk assessments of federal information systems and organizations, amplifying the guidance provided in Special Publication 800-39. This document provides guidance for carrying out each of the three steps in the risk assessment process (i.e., prepare for the assessment, conduct the assessment, and maintain the assessment) and how risk assessments and other organizational risk management processes complement and inform each other.
Technical Specifications
You might also like
NIST Special Publication 800-39, Managing Information Security Risk: Organization, Mission, and Information System View
Security and Privacy Controls for Federal Information Systems and Organizations (NIST SP 800-53, Revision 4)
NIST SP 800-37 Rev 1, Guide for Applying the Risk Management Framework to Federal Information Systems
NIST Special Publication 800-137 Information Security Continuous Monitoring for Federal Information Systems and Organizations