NIST releases publication on using business impact analysis as part of enterprise risk management

The latest publication in NIST’s series on enterprise risk management looks at how to use a business impact analysis for confidentiality and integrity issues.

“This fifth publication in the NIST IR 8286 document series, Integrating Cybersecurity and Enterprise Risk Management, discusses the identification and management of risk as it propagates from system to organization and from organization to enterprise, which in turn better informs Enterprise Risk Management deliberations,” NIST said in an announcement last week.

The agency said, “NIST...