Guide for Conducting Risk Assessments

National Institute of Standards and Technology. (2012). Guide for Conducting Risk Assessments.

Type

Report

Intellectual base

Grey literature

Year

2012

DOI

10.6028/nist.sp.800-30r1

Link

https://doi.org/10.6028/NIST.SP.800-30r1

Cited from

environmental_climate

Cited by

2 citations across 2 artifacts.

Each citation links to the sentence it supports in the citing article.

Primes

• Loss And Damage
  • In cybersecurity, residual risk is the loss expected after preventative, detective, and responsive controls have done their work, with insurance, contingency reserves, and incident-response budgets existing to absorb it.

    This sourceDefines residual risk as the risk remaining after preventive, detective, and responsive controls have been applied, to be accepted, transferred, or further mitigated.

Domain-specific

• Cyberattack
  • NIST risk assessment separates threat sources, threat events, vulnerabilities, likelihood, and impact, preventing the attack action from absorbing the entire risk model.

Verification

This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.

Registry ID ref:e3844a3c0657 · see in the full table