Contact Us

Continuity Insights Management Conference

Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight NIST Release

Continuity Insights

NIST has released Draft NISTIR 8286C, Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight, for public comment. This report completes the cybersecurity risk management (CSRM) and enterprise risk management (ERM) integration cycle described throughout the NISTIR 8286 series.

Draft NISTIR 8286C describes methods for combining risk information from across the enterprise, including notional examples for aggregating and normalizing the results from cybersecurity risk registers (CSRRs) while considering risk parameters, criteria, and business impacts. The resulting integration and normalization of risk information informs enterprise-level risk decision-making and monitoring, which helps create a comprehensive picture of the overarching cyber risk. The report describes the creation of an enterprise risk profile (ERP) that supports the comparison and management of cyber risks along with other risk types.

Draft NISTIR 8286C builds on several previous reports:

The NISTIR 8286 series enables risk practitioners to integrate CSRM activities more fully into the broader enterprise risk processes. Because information and technology comprise some of the enterprise’s most valuable resources, it is vital that directors and senior leaders have a clear understanding of cybersecurity risk posture at all times. It is similarly vital that those identifying, assessing, and treating cybersecurity risk understand enterprise strategic objectives when making risk decisions.

The authors of the NISTIR 8286 series hope that these publications will spark further industry discussion. As NIST continues to develop frameworks and guidance to support the application and integration of information and technology, many of the series’ concepts will be considered for inclusion.

The public comment period is open through March 11, 2022. See the publication details for a copy of the draft and instructions for submitting comments.

Read more.

Continuity Insights

Similar Articles

Continuity Insights News Updates

New Study: A Review of Work from Home Strategies Survey As organizations revisit their Business Continuity Programs within the context of the pandemic, it is useful to understand the many …

ICOR Webinar: Strategies to Increase Supply Chain Resilience

ICOR has announced that Strategies to Increase Supply Chain Resilience, a new educational webinar, has been scheduled for Wednesday, July 15, 2020 at 1:00 p.m. ET. This webinar will review …

Entries Open for BCI Americas Awards 2022

The BCI Americas Awards regional awards are back for their 2022 edition. Registration for these high-profile awards is now open here. Winning a BCI Americas Award raises your profile within …

Leave a Comment

Share to...