Contact Us

Continuity Insights Management Conference

Integrating Cybersecurity and Enterprise Risk Management (ERM) (2nd Draft)

Continuity Insights

The National Institute of Standards and Technology (‘NIST’) is seeking comments from business continuity professionals on it recently released second Draft NISTIR 8286 Integrating Cybersecurity and Enterprise Risk Management (‘ERM’) (‘the Draft’) to promote greater understanding of the relationship between cyber security risk management and ERM and the benefits of integrating those approaches.

The Draft contains the same main concepts as the initial public draft, but their presentation has been revised to clarify the concepts and address public comments submitted for the initial draft.

The abstract for the Draft states: The increasing frequency, creativity, and variety of cybersecurity attacks means that all enterprises should ensure cybersecurity risk is getting the appropriate attention within their enterprise risk management (ERM) programs. This document is intended to help individual organizations within an enterprise improve their cybersecurity risk information, which they provide as inputs to their enterprise’s ERM processes through communications and risk information sharing. By doing so, enterprises and their component organizations can better identify, assess, and manage their cybersecurity risks in the context of their broader mission and business objectives. Focusing on the use of risk registers to set out cybersecurity risk, this document explains the value of rolling up measures of risk usually addressed at lower system and organization levels to the broader enterprise level.

To take part in the consultation visit the website. Comments on the Draft can be submitted to nistir8286@nist.gov by 21 August 2020.

Continuity Insights

Similar Articles

Annual Crisis Event Impact Report Now Available

BC Management has announced that its 8th Edition Crisis Event Impact Report is now available for download for the BC/DR community. The report highlights which events trigger the highest concerns, …

Still Time to Enter BCI Americas Awards 2022

BCI Americas has announced that there’s still time to enter the Americas Awards 2022 regional awards. Registration for these high-profile awards will close on April 28, 2022. Entries can be …

Business Continuity Best Practices: 7 Top Solutions

Analyzing technology research papers and reports, product updates, and capability trends, the editors of Solutions Review have compiled its top seven Business Continuity best practices articles for IT decision-makers. The …

Leave a Comment

Share to...