What is NIST 800-30?

The NIST 800-30 is a special publication designed to guide risk assessments for federal information systems and organizations. The NIST 800-30 risk assessments help organizations plan their security strategies and map out areas for improvement and IT security investments.

NIST 800-30 is specifically used to translate cyber risk in a way that can be understood by upper management.

Return to NIST Glossary