Phu Xuan University Library
|
PXU E-LIB
Sign in
Using NIST for Security and Risk Assessment

External

Using NIST for Security and Risk Assessment

A practical approach for applying NIST Special Publications (SP) guidance to Information (IT) and Operational (OT) technology systems. Methodology includes assessing and evaluating the security of systems containing Confidential but Unclassified Information (CUI).

Engineering
Author
Tom Dover
Publisher
Butler County Community College
Source
LibreTexts
License
CC BY-NC
Language
EN
Read online Download PDF (open licence)
Contents· 24 sections
  1. 01: Introduction
  2. 1.01: The Distributed Challenge of Security and Risk Assessment
  3. 1.02: Why use NIST
  4. 1.03: Regulatory and Legal Issues
  5. 1.04: FISMA
  6. 1.05: FIPS 199 and 200
  7. 1.06: Security Assessment Versus Risk Assessment- Whats the Difference
  8. 02: Security Assessment Using SP.800-171r2 and SP.800-172
  9. 2.01: Introduction
  10. 2.02: Process
  11. 2.03: Methodology
  12. 2.04: Design
  13. 2.05: Variables
  14. 2.06: Using the Assessment Workbook
  15. 03: Security Assessment using SP.800-213 and SP.800-213A
  16. 3.01: Introduction
  17. 3.02: Governance and Oversight
  18. 3.03: Challenges to Assessing IoT-MIoT
  19. 3.04: Using NIST SP.800-213A Capabilities for MIoT Security Assessment
  20. 3.05: Evaluation Process
  21. 3.06: Methodology - Design and Variables
  22. 3.07: Using the Assessment Workbook
  23. 3.08: Advantages and Benefits of Using NIST SP.800-213 and SP.800-213A for MIoT Assessment
  24. 04: VI. Assessment Workbook Downloads