NIST Releases Final Security Risk Assessment Guide

The National Institute of Standards and Technology Sept. 18 announced the release of its final guidelines on conducting computer security risk assessments of federal information systems.

“With the increasing breadth and depth of cyber attacks on federal information systems and U.S. critical infrastructure, risk assessments provide important information to guide and inform the selection of appropriate defensive measures so organizations can respond effectively to cyber-related risks,” Ron Ross, NIST fellow and one of the guide’s authors, said in the institute’s statement. In September 2011, NIST released a draft of the risk assessment manual, which was an update to a 2002 ...