Read and Download Free eBooks
/
Categories
Browse by category
1,965 books to get lost inYours to read. Yours to keep.
No books found.
Try another title or author.
Try another title or author.
Information and communications technology risks can affect an organization’s mission far beyond an individual computer system. This NIST publication explains how to connect assessments made at system and organizational levels with an enterprise-wide view of risk.
The guide examines governance, risk appetite and tolerance, risk registers and the process of bringing lower-level information into an enterprise risk profile. Examples and templates help show how technical concerns can be evaluated alongside other business and mission risks. The complete November 2023 final edition preserves its diagrams, definitions, references and supporting appendices.
Stephen Quinn, Nahla Ivy, Julie Chua, Matthew Barrett, Larry Feldman, Daniel Topper, Gregory Witte, Robert Gardner and Karen Scarfone. Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio. National Institute of Standards and Technology, 2023. https://doi.org/10.6028/NIST.SP.800-221. Complete original publication and source credits retained.