NIST Releases Federal Risk Assessment Guide

[InfoSec News <alerts () infosecnews org>]

http://www.informationweek.com/news/government/security/231601885

By Elizabeth Montalbano
InformationWeek
September 21, 2011

The federal organization for creating technology standards has released 
new guidance to help agencies assess risk within their IT systems as 
part of an overall strategy to instill more prevention in federal 
cybersecurity.

The National Institute for Standards and Technology (NIST) is currently 
seeking comments through Nov. 4 on its Guide for Conducting Risk 
Assessments, which updates an original version published nine years ago.

The guide is aimed at helping agencies evaluate the current threat 
landscape as well as identify potential vulnerabilities and the adverse 
impacts they may have on agency business operations and missions, 
according to NIST.

Risk assessment is one of four steps in agencies' general security 
risk-management strategy, according to NIST. Assessment helps agencies 
determine the appropriate response to cyberattacks or threats before 
they happen and guides their IT investment decisions for cyber-defense 
solutions, according to the organization.

[...]


_____________________________________________________________
Register now for the #HITB2011KUL - Asia's premier
deep-knowledge network security event now in it's 9th year!
http://conference.hitb.org/hitbsecconf2011kul/