Contact Us

Continuity Insights Management Conference

New Guide to Integrating Cyber Security and Enterprise Risk Management

The National Institute of Technology and Standards (NIST) has released ‘NISTIR 8286, Integrating Cybersecurity and Enterprise Risk Management (ERM),” a new publication that aims to promote greater understanding of the relationship between cyber security risk management and ERM, and the benefits of integrating those approaches.

The following is the document abstract:

The increasing frequency, creativity, and severity of cybersecurity attacks means that all enterprises should ensure that cybersecurity risk is receiving appropriate attention within their enterprise risk management (ERM) programs. This document is intended to help individual organizations within an enterprise improve their cybersecurity risk information, which they provide as inputs to their enterprise’s ERM processes through communications and risk information sharing. By doing so, enterprises and their component organizations can better identify, assess, and manage their cybersecurity risks in the context of their broader mission and business objectives. Focusing on the use of risk registers to set out cybersecurity risk, this document explains the value of rolling up measures of risk usually addressed at lower system and organization levels to the broader enterprise level.

NISTIR 8286 is available as a free download here.

Continuity Insights

Similar Articles

New Guide: Best Practices for Pandemic Resilience & Planning

Business resilience is becoming a higher prerogative for boards and senior management. An escalating sophistication of cyberattacks, intricacy in processes and IT, reliance on third parties, data management – all …

The Results Are In: To BIA or Not to BIA…Revisited

As reported earlier this year, Continuity Central announced that it would be producing an updated version of its 2017 study To BIA or Not to BIA, which looked at whether …

Are People Really a Business Continuity Issue?

It’s a good question to ask of the organizations that have found out the hard way. Temporary offices are in place and IT services are back online, but the people …

Leave a Comment

Share to...