TIM-8330 V4

Öbrand, L., Holström, J., & Newman, M. (2018). Navigating Rumsfeld's quadrants: A performative perspective on IT risk management. Technology in society, 53, 1-8.
This paper explores risk management theory by investigating the internal dynamics of IT risks in contemporary organizations.

National Institute of Standards and Technology. (2020). The NIST privacy framework: A tool for improving privacy through enterprise risk management.
Read Sections 1-3 (Privacy Framework Introduction, Privacy Framework Basics, and How to Use the Privacy Framework).
The Privacy Framework is used by the organization to build trust in their products and services, better communicate their privacy practices, and help meet their compliance obligations.

National Institute of Standards and Technology (2020). Security and privacy controls for information systems and organizations (NIST Special Publication 800-53, Revision 5).

• Read Chapter 2 – The Fundamentals.
  This publication provides a catalog of security and privacy controls for information systems and organizations to protect organizational operations and assets, individuals, other organizations, and the Nation.

National Institute of Standards and Technology (2018). Risk management framework for information systems and organizations: A system life cycle approach for security and privacy (NIST Special Publication 800-37, Revision 2).

• Read Chapter 2 – The Fundamentals.
  This publication describes the Risk Management Framework (RMF) and provides guidelines for applying the RMF to information systems and organizations.

MITRE Corporation. (2021). MITRE systems engineering guide – risk identification.
Read the webpage information on Risk Identification.
This website provides information on the process of risk identification, documentation, and communication.

ISACA® (2021). IT Risk Resources | ISACA.
This website provides a vast array of information and publications on the understanding and management of IT risk.

Deloitte. (2021). On-site inspection (OSI) readiness overview.
This PDF provides an overview of the on-site inspection process.

Cybersecurity & Infrastructure Security Agency. (2021). National risk management.
This website provides information on identifying, analyzing, prioritizing, and managing significant strategic risks.

Center for Internet Security. (2021). The 18 CIS controls.
This website provides information on the latest version of the 18 CIS Controls.