Integrating Cybersecurity And Enterprise Risk Management (ERM) (NISTIR 8286)
Quinn, S., Ivy, N., Barrett, M., Witte, G., & Gardner, R.(2022). Integrating cybersecurity and enterprise risk management (ERM) (NISTIR 8286). National Institute of Standards and Technology (NIST).
This document is designed as a framework to assist individual organizations within an enterprise to improve their cybersecurity risk information, which they provide as inputs to their enterprise’s ERM processes through communications and risk information sharing. Section 2 focuses on various frameworks and models used to identify and understand risk in the enterprise.