U.S. Department of Justice Simplified Risk Analysis Guidelines

Roback, Edward

doi:https://doi.org/10.6028/NIST.IR.4387

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov. [12:20 pm ET - If you received "Page Not Found" errors recently, please retry accessing those files. File synchronization should now be complete.]

NIST IR 4387

U.S. Department of Justice Simplified Risk Analysis Guidelines

Documentation Topics

Date Published: August 1990

Editor(s)

Edward Roback (NIST)

Abstract

This National Institute of Standards and Technology Interagency Report (NISTIR) presents the Simplified Risk Analysis Guidelines developed by the U.S. Department of Justice, Justice Management Division, Security and Emergency Planning Staff, ADP/Telecommunications Group. The National Institute of Standards and Technology (NIST) makes no claim or endorsement of this risk analysis methodology. However, as this material may be of use to other organizations, the report is being reprinted by NIST to make it publicly available and to provide for broad dissemination of this federally sponsored work. This publication is part of a continuing effort to assist federal agencies in accordance with NIST's mandate under the Computer Security Act of 1987.

Keywords

computer security; guidelines; risk analysis

Control Families

None selected

Documentation

Publication:
https://doi.org/10.6028/NIST.IR.4387
Download URL

Supplemental Material:
None available

Document History:
08/01/90: IR 4387 (Final)

Topics

Security and Privacy

audit & accountability, risk assessment