Guide for Conducting Risk Assessments¶
National Institute of Standards and Technology. (2012). Guide for Conducting Risk Assessments.
Cited by¶
3 citations across 3 artifacts.
Each citation links to the sentence it supports in the citing article.
Primes¶
- Loss And Damage
- In cybersecurity, residual risk is the loss expected after preventative, detective, and responsive controls have done their work, with insurance, contingency reserves, and incident-response budgets existing to absorb it.
This sourceDefines residual risk as the risk remaining after preventive, detective, and responsive controls have been applied, to be accepted, transferred, or further mitigated.
Supported in partVerified against the work's full text
NIST SP 800-30 glossary defines residual risk as risk remaining after security measures; it does not name preventive/detective/responsive controls or insurance and reserves.
“Portion of risk remaining after security measures have”
- In cybersecurity, residual risk is the loss expected after preventative, detective, and responsive controls have done their work, with insurance, contingency reserves, and incident-response budgets existing to absorb it.
Domain-specific¶
- Cyberattack
- Decision Method
- Listed in the references but not attached to a specific claim.
Verification¶
Does it exist? Confirmed. This work's DOI resolves to a registered record, which fixes its identity. That is all it fixes.
Does it back the claim? Read against the text for 1 of 3 citations: 1 supported in part. Each verdict is shown under its citation below, with what in the work backs the sentence.
Support is checked per citation rather than per work — the same source can be cited soundly in one article and wrongly in another. Per-citation recording began recently, so a citation with no recorded check is a gap in the record rather than evidence it went unchecked.
See how references were verified.
Registry ID ref:e3844a3c0657 · see in the full table