Comprehensive Integrated Risk Management Solutions are available for all the world's standards!
Our risk assessment modules all participate in auto-mapping to the global compliance frameworks, saving you time and trouble. Even better, our real-time scoring, reporting, and dashboards help you stay current and compliant.
Build your own risk module easily, or use our preconfigured inventory covering:
NIST Special Publication 800-30
NIST Special Publication 800-30 provides guidance for conducting risk assessments of federal information systems and organizations, amplifying the guidance in Special Publication 800-39. Risk assessments, carried out at all three tiers in the risk management hierarchy, are part of an overall risk management process—providing senior leaders/executives with the information needed to determine appropriate courses of action in response to identified risks. In particular, provides guidance for carrying out each of the steps in the risk assessment process (i.e., preparing for the assessment, conducting the assessment, communicating the results of the assessment, and maintaining the assessment) and how risk assessments and other organizational risk management processes complement and inform each other.
Special Publication 800-30 also provides guidance to organizations on identifying specific risk factors to monitor on an ongoing basis, so that organizations can determine whether risks have increased to unacceptable levels (i.e., exceeding organizational risk tolerance) and whether different courses of action should be taken.
- NIST Special Publication 800-30 - Risk Management Guide for Information Technology Systems
What are you waiting for?
You are just a conversation away from putting the power of Continuum GRC to work for you.
Contact us using the form below or calling us at 1-888-896-6207 for immediate assistance.