National Institute National Institute of Standards & Technology

• Guide for Conducting Risk Assessments
• Information Security Continuous Monitoring for Federal Information Systems and Organizations
• Information Security Risk and Continuous Monitoring
• Managing Information Security Risk