The US NIST has published a new guidance document to help smaller businesses use its Risk Management Framework.
The ‘NIST Risk Management Framework (RMF) Small Enterprise Quick Start Guide: A Comprehensive, Flexible, Risk-Based Approach to Managing Information Security and Privacy Risk’ is intended to be an introductory guide to help organizations get started with the framework.
Abstract (verbatim)
For organizations of all sizes, managing risk (including information security and privacy risk), is critical for organizational resilience. This guide is designed to help small, under-resourced entities understand the value and core components of the NIST Risk Management Framework (RMF) and provide a starting point for designing and implementing an information security and privacy risk management program.
What is the NIST Risk Management Framework?
The NIST Risk Management Framework provides a comprehensive, flexible, repeatable, and measurable seven-step process that organizations can use to manage their unique information security and privacy risks. The RMF can be applied to new and existing systems, any type of system or technology, and within any type of organization regardless of size or sector.
