United States Government Publishing Office publisher pbl distributor dst United States Commerce Department National Institute of Standards and Technology (NIST) author aut Government Organization Quinn, Stephen. author aut text government publication eng GOVPUB Executive Agency Publications executive 2023-10-27 Commerce Department 2022-02-10 monographic deposited born digital 43 digital object pages C 13. https://www.govinfo.gov/app/details/GOVPUB-C13-4265be69316bbf3d937ee195ec010d1e P0b002ee1c1bb2bea on1389889975 (OCoLC)1389889975 DGPO 2023-10-27 2026-06-27 GOVPUB-C13-4265be69316bbf3d937ee195ec010d1e machine generated eng fdlp C13 GOVPUB-C13-4265be69316bbf3d937ee195ec010d1e 4265be69316bbf3d937ee195ec010d1e GOVPUB NIST Interagency or Internal Reports NOTE: THE “DATE ISSUED” ABOVE MAY DEFAULT TO JANUARY 1ST OF A GIVEN YEAR. TO THE VIEW THE MOST ACCURATE DATE OF ISSUE, REVIEW THE TITLE PAGE OF THE PUBLICATION. Interim or final reports on work performed by NIST for outside sponsors (both government and non-government). May also report results of NIST projects of transitory or limited interest, including those that will be published subsequently in more comprehensive form. National Institute of Standards and Technology Commerce Department. National Institute of Standards and Technology. 2022 2022-02-10 https://www.govinfo.gov/app/details/GOVPUB-C13-4265be69316bbf3d937ee195ec010d1e https://www.govinfo.gov/content/pkg/GOVPUB-C13-4265be69316bbf3d937ee195ec010d1e/pdf/GOVPUB-C13-4265be69316bbf3d937ee195ec010d1e.pdf Computer security Cybersecurity risk management Cybersecurity risk measurement Cybersecurity risk register (CSRR) Enterprise risk management (ERM) Key performance indicator (KPI) Key risk indicator (KRI) Risk acceptance Risk aggregation Risk avoidance Risk conditioning Risk management Risk mitigation Risk optimization Risk prioritization Risk response Risk sharing Risk transfer Quinn, Stephen. creator Quinn, Stephen. Ivy, Nahla. Barrett, Matthew. Witte, Greg. Gardner, R. K. National Institute of Standards and Technology (U.S.) Material Measurement Laboratory mdu U.S. Dept. of Commerce, National Institute of Standards and Technology 2022-02-10. monographic 1 online resource (43 pages) : illustrations (color) text technical report eng This document is the third in a series that supplements NIST Interagency/Internal Report (NISTIR) 8286, Integrating Cybersecurity and Enterprise Risk Management (ERM). This series provides additional details regarding the enterprise application of cybersecurity risk information; the previous documents, NISTIRs 8286A and 8286B, provided details regarding stakeholder risk direction and methods for assessing and managing cybersecurity risk in light of enterprise objectives. NISTIR 8286C describes how information, as recorded in cybersecurity risk registers (CSRRs), may be integrated as part of a holistic approach to ensuring that risks to information and technology are properly considered for the enterprise risk portfolio. This cohesive understanding supports an enterprise risk register (ERR) and enterprise risk profile (ERP) that, in turn, support the achievement of enterprise objectives. Stephen Quinn; Nahla Ivy; Matthew Barrett; Greg Witte; R. K. Gardner. February 2022. Title from PDF title page (viewed January 4, 2023). Includes bibliographical references. Approved by the NIST Editorial Review Board on 2022-09-20 Mode of access: World Wide Web. Systems requirements: Adobe Acrobat PDF reader. Computer security Risk management Cybersecurity risk management Cybersecurity risk measurement Cybersecurity risk register (CSRR) Enterprise risk management (ERM) Key performance indicator (KPI) Key risk indicator (KRI) Risk acceptance Risk aggregation Risk avoidance Risk conditioning Risk mitigation Risk optimization Risk prioritization Risk response Risk sharing Risk transfer https://doi.org/10.6028/NIST.IR.8286C