NISTIR 8286DNISTIRFinalpublication
NISTIR 8286D - Using Business Impact Analysis to Inform Risk Prioritization and Response
Extends traditional business impact analysis beyond availability to include confidentiality and integrity impact analyses. Helps enterprise leaders determine critical and sensitive assets and establish risk appetite and tolerance as input to cybersecurity risk management.
Publication Number
8286D
Series
NISTIR
Status
Final
Date
2022-11
business impact analysisBIAERMrisk prioritizationrisk appetite